Static task
static1
Behavioral task
behavioral1
Sample
ece1554c9965e2a9d4bbd5e55fe63121_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ece1554c9965e2a9d4bbd5e55fe63121_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ece1554c9965e2a9d4bbd5e55fe63121_JaffaCakes118
-
Size
12KB
-
MD5
ece1554c9965e2a9d4bbd5e55fe63121
-
SHA1
d7a04c2be3b55d12131f3da25ff65c6ac8a851aa
-
SHA256
80b388987a06f391fb4c851b4c1da443c77a7ba3c52a1fc531224eb1ae0a100d
-
SHA512
e3be2293ef563e1ce6c4e0aecfa2878b1e1d7e839e90ba8e49a8c95ff5638ad987d37a9e5e81f19fa2f56af20530c30882278d46f38f94161f01c1dd2f968d36
-
SSDEEP
96:cZepXiyQ5l9EXw3gvxtInr/cvxqj571yQtQKQYQ:c0SdoJptlqd7MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ece1554c9965e2a9d4bbd5e55fe63121_JaffaCakes118
Files
-
ece1554c9965e2a9d4bbd5e55fe63121_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ