Static task
static1
Behavioral task
behavioral1
Sample
f558601b137874d146db6b202d36ab2e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f558601b137874d146db6b202d36ab2e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f558601b137874d146db6b202d36ab2e_JaffaCakes118
-
Size
12KB
-
MD5
f558601b137874d146db6b202d36ab2e
-
SHA1
2476e008c3f82d42c39c0255df38b6b550da8a1c
-
SHA256
b7b5ce834ce5f8e4aedd4bd2cc68b0c254a0f16407e8971fa8fc250b60a0c952
-
SHA512
28e2bacbc8ff8caf8101dd6d5d73074e3700315c90d7eabae43ca1e1da7579cd7cb06bba2243be6ee8db5c39f5880e1da67370915eeeb92d6f5227df23a75c96
-
SSDEEP
96:vpAufEzkKB0U4nbymMgMm/tYjz8a3zq/w4cqMQ:xA9703b77Mm/tA30+RQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f558601b137874d146db6b202d36ab2e_JaffaCakes118
Files
-
f558601b137874d146db6b202d36ab2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ