Static task
static1
Behavioral task
behavioral1
Sample
049ff3b712b39b633052a6067bffb4ee_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
049ff3b712b39b633052a6067bffb4ee_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
049ff3b712b39b633052a6067bffb4ee_JaffaCakes118
-
Size
30KB
-
MD5
049ff3b712b39b633052a6067bffb4ee
-
SHA1
21ec0fcff7b568093aef8a975862c7891255eb28
-
SHA256
7912b111c398702275e6b07272755577b540d474f1a7dd695aac15bb114d811d
-
SHA512
5476841fafcacafc9d1f4db051dfa007900dc35f4c3e20147ad74de9413c00b1aff9e5b468a69a111c2447312f6546e52d91a07b491e2903249c1609354eecbc
-
SSDEEP
96:aP957UbHKRvY/dK+7cezGsLQxQU0zyUgBcg+befvBia5YqpT33vbzzMxQ:eY/gScSLQKJYcdb415xT33zMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 049ff3b712b39b633052a6067bffb4ee_JaffaCakes118
Files
-
049ff3b712b39b633052a6067bffb4ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ