Static task
static1
Behavioral task
behavioral1
Sample
fc8703215c7978e49b8b40babdfc6d32_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc8703215c7978e49b8b40babdfc6d32_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fc8703215c7978e49b8b40babdfc6d32_JaffaCakes118
-
Size
30KB
-
MD5
fc8703215c7978e49b8b40babdfc6d32
-
SHA1
265b28da26ceb67b035cf21eaf035722069abb7c
-
SHA256
5f44b694d52be34de298a8dfacddc2c3f1d1c0cb174d5c3b70cace0dd11f7772
-
SHA512
fd2e8d660beb2b6c6a27c4a35cb93ff19003ed3b578702bca9262c0d0e3b427a305260bdef26aa400c9656b23813e8ce35a5b142f6ec5e41ce446a54a6d8e86d
-
SSDEEP
768:HqNKFqXfBG5PXxw46w/PtvTVtRHGgnDRfHNmMkv:HqNKFLPXxw46wZTggnd/AMm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc8703215c7978e49b8b40babdfc6d32_JaffaCakes118
Files
-
fc8703215c7978e49b8b40babdfc6d32_JaffaCakes118.exe windows:4 windows x86 arch:x86
f84ff1fec7866e50d95c62e55aa5da77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
Sleep
ConnectNamedPipe
user32
SetTimer
GetFocus
CharNextA
PostQuitMessage
gdi32
Escape
Sections
.text Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ