Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_413cdea73c97795c7d53225a8c45c4df.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_413cdea73c97795c7d53225a8c45c4df.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_413cdea73c97795c7d53225a8c45c4df
-
Size
132KB
-
MD5
413cdea73c97795c7d53225a8c45c4df
-
SHA1
f50365a4cbe60a8e5c48f5aefd1123ef4b879214
-
SHA256
10275ab3bcafe9316754abe236cc5061427ad8e8812e1e4bbafe500dee920673
-
SHA512
57f643ddfd87c9e15c27c1731f41db6ce6b6e0dab71a1de29ddb92da6bc1c7a522ea8ade26eaf316d7d96d8772ced352e39c486f74a9d1be61cf13b4a95c86f7
-
SSDEEP
3072:sFrPk65ICqf1rtgQ5/sLakK/fxLVXedsN5gYId+AxxsjYw:2Pk6TqzH/xLNiXYIAA9w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_413cdea73c97795c7d53225a8c45c4df
Files
-
JaffaCakes118_413cdea73c97795c7d53225a8c45c4df.exe windows:4 windows x86 arch:x86
d4c90557ab4d503766b5f4f81d96d8c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
__p__commode
??3@YAXPAX@Z
kernel32
GetModuleHandleW
GetStartupInfoW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE