Static task
static1
Behavioral task
behavioral1
Sample
c1743f89fe0cf62c9920963c8308f312_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1743f89fe0cf62c9920963c8308f312_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1743f89fe0cf62c9920963c8308f312_JaffaCakes118
-
Size
95KB
-
MD5
c1743f89fe0cf62c9920963c8308f312
-
SHA1
754f0669d248a0f31b12969ef76cecd2dff29bae
-
SHA256
1858fc2a3979f99e63f834025debece1f1303fa645a6470092257b6fb7dd6bda
-
SHA512
265ea56c40a0555086bb0581c9ed843c58b8cf950b729a548665d49e0bb25f911f6da5d1eadb55adaf9b4bb570720a5025a56e143448796c6ea56c077a4581b1
-
SSDEEP
384:httzRVZ0QdjLBdS9xzYYRXNcn6aBuItsMR9TIHaZQ+wzHA5hq7VyXOtnmZgYNWBs:n/HNdoxzYaXan//tF9TSaP+8EnZjO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1743f89fe0cf62c9920963c8308f312_JaffaCakes118
Files
-
c1743f89fe0cf62c9920963c8308f312_JaffaCakes118.exe windows:4 windows x86 arch:x86
e3da69d062c115e30a958f36f935b74f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
rtcSpaceVar
DllFunctionCall
rtcSplit
rtcStrConvVar2
ProcCallEngine
VarPtr
rtcFileLength
ThunRTMain
Sections
.text Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE