Static task
static1
Behavioral task
behavioral1
Sample
edde44883bd0027d68373f3973bf401e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edde44883bd0027d68373f3973bf401e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
edde44883bd0027d68373f3973bf401e_JaffaCakes118
-
Size
66KB
-
MD5
edde44883bd0027d68373f3973bf401e
-
SHA1
2b2b2d87142d0ded574b5b6dcc05486698f50792
-
SHA256
2df061b36846fe4f6ac097b02e85b5e89889ed2a749a1e8fd6507911fcc53613
-
SHA512
21d9d49d7833bc3b3a07e31e78615a214cf55563a0e642c9d867fbea608a0c5ca742c232ba678c8cb0aca5c2efdfb0cf0da8289c64bb35d5bb7c294ac66a287e
-
SSDEEP
1536:uDZLefntmUxkgUxC/UCspk/mP8sPdVzJ6OWzWJ3:eZ6tzkgUAsbpk/mP8a1EVzi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edde44883bd0027d68373f3973bf401e_JaffaCakes118
Files
-
edde44883bd0027d68373f3973bf401e_JaffaCakes118.exe windows:4 windows x86 arch:x86
5518513eb4d5d0bbc053f32280741e30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBrushIndirect
CreateCompatibleDC
GetBitmapBits
GetCurrentPositionEx
DeleteDC
CreateDIBSection
GetPixel
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ