Static task
static1
Behavioral task
behavioral1
Sample
d11e1dcc5b86e3efb4de55a00a333ca8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d11e1dcc5b86e3efb4de55a00a333ca8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d11e1dcc5b86e3efb4de55a00a333ca8_JaffaCakes118
-
Size
76KB
-
MD5
d11e1dcc5b86e3efb4de55a00a333ca8
-
SHA1
9da25a658ad741307c67261520797735a2f54e11
-
SHA256
733db13e32f9eb0bccf3015dc3631737590c7a9755906ae65d793fedfe2ca6a8
-
SHA512
83e04c3b9d2b5d113cee96ea9a9593a997100f0531a1fa7db69eb7b19da9ec59e27c8baa260042cdd10a34b46a8f98e62991e95615070fc2450af9a33d0a7088
-
SSDEEP
1536:p1LS5JH8DAPpRZbaMK9oo/uUJ6ITJLPF/sOgZ2NBBh7WmHPWDMjpYm:pNS5JH8iZbiyom06I9LPF/hgZ2NBnWEt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d11e1dcc5b86e3efb4de55a00a333ca8_JaffaCakes118
Files
-
d11e1dcc5b86e3efb4de55a00a333ca8_JaffaCakes118.exe windows:4 windows x86 arch:x86
d6a6ffe89b7bd023641b15b3dbc41a46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
sin
free
_exit
_except_handler3
__set_app_type
__getmainargs
fwrite
exit
_adjust_fdiv
_onexit
fread
_initterm
strcmp
_acmdln
_XcptFilter
__setusermatherr
fclose
fopen
strlen
fseek
printf
malloc
kernel32
Sleep
GetModuleHandleW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ