Static task
static1
Behavioral task
behavioral1
Sample
f8813b1581485704da5db1f2a1cd8c14_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8813b1581485704da5db1f2a1cd8c14_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f8813b1581485704da5db1f2a1cd8c14_JaffaCakes118
-
Size
16KB
-
MD5
f8813b1581485704da5db1f2a1cd8c14
-
SHA1
c3050279c5963f9995adf4100569c3d6561bb187
-
SHA256
e5c4e35f5835e2dbbe9ad4c32a85e88a06c32ebb493effae89557236b0d0c5b8
-
SHA512
04fe5f159e59c1068c56227f787b0a6cb8bfd4f525d84fd64bf9ae8ca5aae0c797d17a8d47ea9a085418bf2bed0ba0f27b78bac2a097b00c94ff00788e637be7
-
SSDEEP
48:6FsZlAL5fJWk5dDduOd2ZEBuHp2DIpF9fTtS9Hqvamoz4IFBq7:a8yAIB9cZUuHpX79A9Hq3oz4QQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8813b1581485704da5db1f2a1cd8c14_JaffaCakes118
Files
-
f8813b1581485704da5db1f2a1cd8c14_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ