Static task
static1
Behavioral task
behavioral1
Sample
100acc1c63eff3c8d2f4df88f3e23fb5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
100acc1c63eff3c8d2f4df88f3e23fb5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
100acc1c63eff3c8d2f4df88f3e23fb5_JaffaCakes118
-
Size
84KB
-
MD5
100acc1c63eff3c8d2f4df88f3e23fb5
-
SHA1
e90fc2aab14ac450a1d6f58273d22b640f3c6f91
-
SHA256
5a1ea1845f486b36ef57920006808c86bd5e047f9505802b43ad4f7259426d15
-
SHA512
597ad6bbcdab048b7ed49a0f5c06557a61ea17907bdfc6442c2f3635da8ed935a390a527a7af6e29032c8dafbf807b75bc1ed795037d5abcdd285692ee9391b2
-
SSDEEP
1536:WxWvAPKvmv+yJ0GX8NLf7X9aL2Cd6E8VwBiQ04/J6MP4aYE7bkZUXfCKT:FAPKvmWyD8h70L2CUsFh6iRbkuaw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 100acc1c63eff3c8d2f4df88f3e23fb5_JaffaCakes118
Files
-
100acc1c63eff3c8d2f4df88f3e23fb5_JaffaCakes118.exe windows:5 windows x86 arch:x86
9273e943eafac370d91dfe790add94f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
fwrite
_except_handler3
_XcptFilter
fopen
free
fclose
malloc
_onexit
_adjust_fdiv
sin
_exit
__p__commode
_acmdln
strcmp
__getmainargs
strlen
__set_app_type
exit
_initterm
fprintf
user32
GetDesktopWindow
kernel32
GetModuleHandleW
GetStartupInfoA
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE