Static task
static1
Behavioral task
behavioral1
Sample
0683b2afb3f2270d8f51ca1a0b474a74_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0683b2afb3f2270d8f51ca1a0b474a74_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0683b2afb3f2270d8f51ca1a0b474a74_JaffaCakes118
-
Size
21KB
-
MD5
0683b2afb3f2270d8f51ca1a0b474a74
-
SHA1
79b98b8e346ae1d4223fb3ca854e506acf1a1a75
-
SHA256
249751b95d905bbacc46b1a369367f3b068e7ad83b5ead8e3efb65ac0dc24267
-
SHA512
bdf7a08cf8cd2a087a3baaa8cb7f3ed8f5e9d4db2323ed60e7c1fa0cbdd696d5a13336bdfc3df76b924c7d3b26e3c4053357d490544369d8577f240a708fbcdc
-
SSDEEP
192:AXMreRvPc8wsV6Jixoky6FilTTmNw5FF7BHSIf9CRRd/PfOhQ:AcrexfTV60xzFs5yNW1lf4Rd/3OhQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0683b2afb3f2270d8f51ca1a0b474a74_JaffaCakes118
Files
-
0683b2afb3f2270d8f51ca1a0b474a74_JaffaCakes118.exe windows:4 windows x86 arch:x86
c494458029910d0ed6df63da0b05bbd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ