Static task
static1
Behavioral task
behavioral1
Sample
53df765975d27cab32d9e1156b7e6ac1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
53df765975d27cab32d9e1156b7e6ac1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53df765975d27cab32d9e1156b7e6ac1_JaffaCakes118
-
Size
368KB
-
MD5
53df765975d27cab32d9e1156b7e6ac1
-
SHA1
94ad8e76a5a5d8972f63e700bf2203fdf965ffab
-
SHA256
a6be7034b432e829bfe352868f364c76bceb6c0a5aba7b6ae9056ead344d8de4
-
SHA512
a947bc2a0f8e4a0304c4802b50fa197ec226416bc91206038e943dc8bab8eee46987a2a89f1f27501e94a69dd8c7b61d849866e6db1cc7c69a9e5a280e9d29d4
-
SSDEEP
6144:Hf8a6tutTBVd3Xxh7njQrVkoMee2+u4YSQP0YCz3oAI4smig8fcW6nX9DwlplsMd:Hfh8utTtR1nKgnM4Y1PQoAI41ig8k7Na
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53df765975d27cab32d9e1156b7e6ac1_JaffaCakes118
Files
-
53df765975d27cab32d9e1156b7e6ac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
68ce4d0651a89440b0bf3f08824130c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
malloc
free
_exit
_XcptFilter
exit
_acmdln
memcpy
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcmp
__getmainargs
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ