Static task
static1
Behavioral task
behavioral1
Sample
fe532137f48f248df2bdf57676370016_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe532137f48f248df2bdf57676370016_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe532137f48f248df2bdf57676370016_JaffaCakes118
-
Size
8KB
-
MD5
fe532137f48f248df2bdf57676370016
-
SHA1
646f85d4d5d314333ad7c936f49ab0e29789f24a
-
SHA256
515dcbebad36fbca1aaebceae58df4f782c170d281cab8e9dd999e15655a76c4
-
SHA512
c9b5b320786d68caca65ce191504add228ce2b4de06674ff6af7aef7a02bf1dddda5c69009dfb1b95d323ba16c6d9d12fd1b46068a8b2115e1a96238be93b8a0
-
SSDEEP
48:68Z3M/qr07Nusl9OEMC5QtFswDWospAAxrJ2UgQK23Kj5RvQKCPuWBTBv7xH:5M/qI7NuaF5Q9DWPpAgRgQBwvcu4Td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe532137f48f248df2bdf57676370016_JaffaCakes118
Files
-
fe532137f48f248df2bdf57676370016_JaffaCakes118.exe windows:4 windows x86 arch:x86
65cdcf7f38a0fd181c6cb07d32d8f71e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ