Static task
static1
Behavioral task
behavioral1
Sample
4018ed5d44749ac78639c44562d72cf5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4018ed5d44749ac78639c44562d72cf5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4018ed5d44749ac78639c44562d72cf5_JaffaCakes118
-
Size
35KB
-
MD5
4018ed5d44749ac78639c44562d72cf5
-
SHA1
5ff3b1fe4b3a7aa2d0922000d43d9eebb0e37c83
-
SHA256
ece8c0aa6bd6adb5630799b8757e0767cb3285e0b0251d0183d3edf2f257e945
-
SHA512
0dee6577aeef425a91491df3c1f7708ea23fa27e7d4c662418eb314dcbaea908553c1104dfe8a23ab561ab80c8c68dcdb7a444f36f32bbde47e1d6c518bc22b0
-
SSDEEP
768:Hy5p4YXblGj+K/Zz9wPiMQ9HIy9EfGRRrQ/O:Hy55Yj+KoP8oiuH2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4018ed5d44749ac78639c44562d72cf5_JaffaCakes118
Files
-
4018ed5d44749ac78639c44562d72cf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff3f59d12d6cb3ab5f023c655bd48c6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetStartupInfoA
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__p__commode
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE