Static task
static1
Behavioral task
behavioral1
Sample
e820f6ed39bf444d115782a76a935d43_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e820f6ed39bf444d115782a76a935d43_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e820f6ed39bf444d115782a76a935d43_JaffaCakes118
-
Size
30KB
-
MD5
e820f6ed39bf444d115782a76a935d43
-
SHA1
03544465e268205e6a088e1f49d03eee2996bf46
-
SHA256
22593d61f7169dac0e8f013869aac4f3f0eb044221806a5925056cc32f50714c
-
SHA512
cd67a3389c1c756943e796148b6d928bfbd4aa6a9757dc2acc3c38bac320d1facc596b0f4f16466f4f34fd75aad58231ef9cdfcf925b39a7ebed0dc477211671
-
SSDEEP
192:AK/njCFRFZSctQoyhSvv1988tmyFW7fUpf4KF5/sESGQ:AKLCPFUctQohZ7FcfKb+GQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e820f6ed39bf444d115782a76a935d43_JaffaCakes118
Files
-
e820f6ed39bf444d115782a76a935d43_JaffaCakes118.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ