Static task
static1
Behavioral task
behavioral1
Sample
acc10d4e8877d2fafd40d17bfbc47669_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acc10d4e8877d2fafd40d17bfbc47669_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acc10d4e8877d2fafd40d17bfbc47669_JaffaCakes118
-
Size
77KB
-
MD5
acc10d4e8877d2fafd40d17bfbc47669
-
SHA1
f2160a824201979cae8ff18fac71ef97b70e64e4
-
SHA256
a604374eae0ce22674ccb47929bb440c0a7d59184655c38b181a50de52a213fb
-
SHA512
c1ea7c2a12253f1ff68b6439ae28f9493c955af2b48e45fcb81ebc7783a955dd1de6b061b0ca27072af22d8e626d6da095edf19e3130afb4c3a482489cae4385
-
SSDEEP
1536:/xMTeGkunh+QUMJEQe1okUMWMxTPTjTIbCIw6NrqTcJ3OGFG5NuQEWrgiz:pohCM2vFUbMxL3uBqEOGK9EWrPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acc10d4e8877d2fafd40d17bfbc47669_JaffaCakes118
Files
-
acc10d4e8877d2fafd40d17bfbc47669_JaffaCakes118.exe windows:4 windows x86 arch:x86
a48be2994e78ab545b81866092a07e6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
fclose
atoi
fprintf
malloc
wcslen
memset
free
sin
__p__commode
__getmainargs
memmove
_XcptFilter
_adjust_fdiv
exit
strrchr
fputc
strlen
_except_handler3
strcmp
fopen
_acmdln
_initterm
fwrite
_iob
__setusermatherr
_exit
__set_app_type
_onexit
user32
GetDesktopWindow
kernel32
GetStartupInfoA
GetModuleHandleW
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ