Static task
static1
Behavioral task
behavioral1
Sample
0fda6744240f40f1a9a1824bd0e5ac0e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fda6744240f40f1a9a1824bd0e5ac0e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fda6744240f40f1a9a1824bd0e5ac0e_JaffaCakes118
-
Size
30KB
-
MD5
0fda6744240f40f1a9a1824bd0e5ac0e
-
SHA1
4b31f0bbde3b875b42cbb3e9e4940b2f2f9e0614
-
SHA256
30842b28f9b9cb2ce80d5e73727779b597e4d71aeecef71036eaa1eb215f633d
-
SHA512
b9f3014c94bdbf6d5bb91f9cd4b26336df7251b48b9705d82458866b76a6b7130d3f2010e92f92d1ca10e7ab1e10edc1dafa4b23fc5c17a1c29b88641a0ae994
-
SSDEEP
192:ryW8RHF/7xJ1ERykRxDqXCMN+VLB3T3KMxQ:WvRZCRdxPO+DjKoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fda6744240f40f1a9a1824bd0e5ac0e_JaffaCakes118
Files
-
0fda6744240f40f1a9a1824bd0e5ac0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ