Static task
static1
Behavioral task
behavioral1
Sample
a567cf21b2042373e86c3f0aa13ca8cb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a567cf21b2042373e86c3f0aa13ca8cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a567cf21b2042373e86c3f0aa13ca8cb_JaffaCakes118
-
Size
4KB
-
MD5
a567cf21b2042373e86c3f0aa13ca8cb
-
SHA1
21ff1464b64ee4f935d8e67f406bca7ba8a18571
-
SHA256
d8860657ab7c6d59eb98f9a3f55db189368237a710442ec8739de8dc79129f48
-
SHA512
9d992e90ad82d0306e8498d82ad792091727891f57b0bab178ea27177ac41601a34a2f7171cfe2210ccbf157ff12452fbbc7c603ca6ae7abf0716197743dd5a2
-
SSDEEP
48:yaNLPay1RqFAZZYOBu7i+d6CT6GM13H2dHv/X35F+aBXBZQCjbxHlig3:V3bqS8aul6CTEdWV35F+aDjtHN3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a567cf21b2042373e86c3f0aa13ca8cb_JaffaCakes118
Files
-
a567cf21b2042373e86c3f0aa13ca8cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
933dba356cfd59ead6b9ed5bca2217ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
fprintf
fopen
fgets
fclose
exit
_c_exit
_exit
_XcptFilter
_cexit
__p___initenv
_amsg_exit
printf
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
__getmainargs
_assert
memset
kernel32
GetModuleHandleA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 842B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE