Static task
static1
Behavioral task
behavioral1
Sample
07010aa173dd530473cf2ef2744f0894_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07010aa173dd530473cf2ef2744f0894_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07010aa173dd530473cf2ef2744f0894_JaffaCakes118
-
Size
11KB
-
MD5
07010aa173dd530473cf2ef2744f0894
-
SHA1
e1dca8655d2b7eeb04415c8f8db510224382089c
-
SHA256
a0489e8e327e6f7a2cb074c74df76a79a5bd4f153bf1972a10135379fd0b9c0a
-
SHA512
4c9e35f61e3c7da49c5ba8471c37095fd6033b19494d60bcb10e2db1e09d7f8a3c7cb9f946bb0b120e0e73375d0cc1afd47bd8c790ef681b2ce743474f6e982f
-
SSDEEP
48:6Taks+D4Lh5XjP4/txE7rWUjLJ2WbK7YDcUQ7UZBq7:vDBjP4lxE7B2dIo4ZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07010aa173dd530473cf2ef2744f0894_JaffaCakes118
Files
-
07010aa173dd530473cf2ef2744f0894_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ