Static task
static1
Behavioral task
behavioral1
Sample
c04810046a22847b9271de18434efdb5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c04810046a22847b9271de18434efdb5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c04810046a22847b9271de18434efdb5_JaffaCakes118
-
Size
100KB
-
MD5
c04810046a22847b9271de18434efdb5
-
SHA1
549e7bf0a796ad58bb2f81a3433722ef252ced9c
-
SHA256
5d1e168697014c21c2bdf7aa970ef09df0bb7d2f92bd4589405a2b3c2ca2852a
-
SHA512
12bf1fa1f29da6bd2c7f1aa9615f3ab8587680fa741818c022771f1a87a8b9de6af7f2aee0c905e94c5f46a88edcf38f443facc8a8fddc7185e22df6de05bae5
-
SSDEEP
3072:eXaxgFWh+4CFm1lIIr5BhMNJVHKChJHgON6:emamLrMpKChJHNN6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04810046a22847b9271de18434efdb5_JaffaCakes118
Files
-
c04810046a22847b9271de18434efdb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a250c714a2a6c8a19d2ceb9c36290a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateProcess
GetProcAddress
VirtualAlloc
ExitProcess
GetTickCount
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA
msvcp60
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcrt
strlen
__CxxFrameHandler
_ftol
pow
tan
??2@YAPAXI@Z
fabs
memcpy
log10
sqrt
ceil
cosh
atan2
floor
log
tanh
cos
exp
asin
printf
fmod
atan
sin
strcpy
strcat
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sinh
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 76KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE