?GeometryTranslate@@YGHPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
d086f435952dffd907b19d6e02be3723_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d086f435952dffd907b19d6e02be3723_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d086f435952dffd907b19d6e02be3723_JaffaCakes118
-
Size
171KB
-
MD5
d086f435952dffd907b19d6e02be3723
-
SHA1
8517477fe98c8cfeca9dd13e288acbbb05176104
-
SHA256
ee2db8d11d9f3c03fbb91374789b6c727444061b26b5924382dcae950a925fff
-
SHA512
b6f1bab4dad98cbb9f789bec80ba0d6e5c721524e3226fd1b2bdde5bfd611f60fc04c062f18e8b4363c35aa17d8c355d22185634da808b2cbe69028a6bd7fa9d
-
SSDEEP
3072:ElrlgyywOhV/egcNPvxx626ZxNLx2vI/t93oNeRaGW3t:Elrlwv6gcLxz63rWIUcBKt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d086f435952dffd907b19d6e02be3723_JaffaCakes118
Files
-
d086f435952dffd907b19d6e02be3723_JaffaCakes118.exe windows:5 windows x86 arch:x86
71db345d8f97724e367ce38f5f908824
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
msvcrt
atoi
kernel32
LoadLibraryExW
lstrlenA
GetModuleHandleA
LoadLibraryA
shlwapi
PathIsPrefixW
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 147KB - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE