Static task
static1
Behavioral task
behavioral1
Sample
0c5219f69451849cbd01e7cacf125418_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c5219f69451849cbd01e7cacf125418_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0c5219f69451849cbd01e7cacf125418_JaffaCakes118
-
Size
30KB
-
MD5
0c5219f69451849cbd01e7cacf125418
-
SHA1
ed730ace9d4843beed72fc3ca01eac6320a4534c
-
SHA256
079c370d302a1cfe1d486093b478d23e0bfe7b47fd632be2f5dde5508d6d9e83
-
SHA512
a25fccee23331623dd54f06e23aa01e2174d6dab7c00b80783c448bc2c436b22e361217a2acf8e59cbcb5aab7a4cde38140597d7bfef1040449de208062e1fbd
-
SSDEEP
96:aq19JfVJF4np8++uX+Xi6hSJxEKbtPwNqis1/+XcU0+3EqpT33vbzzMxQ:Vrfpyp8+/+XrSLE8yNLWpz+FT33zMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5219f69451849cbd01e7cacf125418_JaffaCakes118
Files
-
0c5219f69451849cbd01e7cacf125418_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ