Static task
static1
Behavioral task
behavioral1
Sample
fb0e2bcccc29327e6c9a02a134a41dd8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb0e2bcccc29327e6c9a02a134a41dd8_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb0e2bcccc29327e6c9a02a134a41dd8_JaffaCakes118
-
Size
69KB
-
MD5
fb0e2bcccc29327e6c9a02a134a41dd8
-
SHA1
7b04f1642adb7f3c95fb358f71c6cb069fb35e60
-
SHA256
dc48a1d81333011790546a34843d0c9f3d10ef8bed214ea83df461d76f490149
-
SHA512
6d65c2da5b2cd8cbab16d95405377106ea7a404995e4c0be5e5d9855c5ac267c807a44307f095699aa2737cde6dc6c4d5f6855d5a3203a830b1117a6adf417bf
-
SSDEEP
1536:6LNMYcvatqMviRoB0wi13kEX+y+Na7AhlS/CLr:fitqM620wC0E7GyO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb0e2bcccc29327e6c9a02a134a41dd8_JaffaCakes118
Files
-
fb0e2bcccc29327e6c9a02a134a41dd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8f468f0ff692b97e5d3e75acb48062b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE