Static task
static1
Behavioral task
behavioral1
Sample
e7b215e9bfe0525f2c6398acaefadbfb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7b215e9bfe0525f2c6398acaefadbfb_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e7b215e9bfe0525f2c6398acaefadbfb_JaffaCakes118
-
Size
32KB
-
MD5
e7b215e9bfe0525f2c6398acaefadbfb
-
SHA1
74d077635ccfb3f36aaf2b5129e2d70cf02e1d6b
-
SHA256
089497f1f752be4a54249ae0edc3607eb6620376ac36f1243a1cb6e64e1ad4c5
-
SHA512
bd97efa36511fbba7dae5ba40bec7bb35c230b74cad52f21f20eebc402ec9e1638e356d3b9118d995ad6085d8c56877fffb5a1a61189498c321e191907088daa
-
SSDEEP
48:6v+Jcdw45dDUqVVDuNDhtfl445r781dyIKl0G0SFaX6qxfffff7uRQBYPxQMvcKp:Z6dUcJuPEOr7lsEM6qx4WcjMch2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7b215e9bfe0525f2c6398acaefadbfb_JaffaCakes118
Files
-
e7b215e9bfe0525f2c6398acaefadbfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ