Static task
static1
Behavioral task
behavioral1
Sample
07007d1a17dd21321b47840f2effb0b3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07007d1a17dd21321b47840f2effb0b3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07007d1a17dd21321b47840f2effb0b3_JaffaCakes118
-
Size
12KB
-
MD5
07007d1a17dd21321b47840f2effb0b3
-
SHA1
8098a0eeb6bfcf40cea65a6f9e10ad379b52eee2
-
SHA256
156fa870a93535dadfd52deb8a2bb658d8a717033b0baa4cf8d9ac9b01915192
-
SHA512
5f08792be68341c8429ef962a442a500c6a5353cfbd711a9c7df33ae4289ace203dd87b14a0900154d69d5738b798be455a38cc23a4c8f20bce2675902e61301
-
SSDEEP
48:KH0xARX9prCoKaEDrhMr7okIfW0N+B+i2C/YykehZ94zDDLLhhSSfzqCJ1msKfBq:k4oitfh47oLux2/r894f7ho4zqeBKfQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07007d1a17dd21321b47840f2effb0b3_JaffaCakes118
Files
-
07007d1a17dd21321b47840f2effb0b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
803d5065fae71cc1237de97239480e72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetClassNameA
DestroyWindow
kernel32
SleepEx
CreateThread
ExitProcess
GetLastError
QueueUserAPC
Sleep
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 354B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ