Static task
static1
Behavioral task
behavioral1
Sample
c1c99da80686ed287830f5d14ee446ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1c99da80686ed287830f5d14ee446ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1c99da80686ed287830f5d14ee446ce_JaffaCakes118
-
Size
135KB
-
MD5
c1c99da80686ed287830f5d14ee446ce
-
SHA1
89836995710d5978c79500f133071bbcc1fb370f
-
SHA256
2b7a8269c6af1313b38d57f8f0d516c6fe5b07be8ca49b8397ccc79df70257a8
-
SHA512
d7f3f75e9997deee816c21bfcbc8d4403f089b7c8368bdeebb2164d6d124c0380c8f91970d798e3b3e3c2bebf6069d37bdf5da0271f562fe4be614b45669dd68
-
SSDEEP
1536:MYxs/D46wcSJv6ELSiBow4mmrxnTPjCR7AWHTJ45CYjEGUmbpWcNI4bSSyUtPsC9:a4WGyELST9CdA6VDYU1sX0vrD6OGjJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c99da80686ed287830f5d14ee446ce_JaffaCakes118
Files
-
c1c99da80686ed287830f5d14ee446ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
21f59b661d8dc619f3810a8795b99554
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit
kernel32
GetModuleHandleA
SystemTimeToFileTime
SetEnvironmentVariableA
EndUpdateResourceA
SetStdHandle
GlobalAlloc
ReadFileScatter
GetStartupInfoA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ