Static task
static1
Behavioral task
behavioral1
Sample
1489d244944947ef2d023d5fcc688759_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1489d244944947ef2d023d5fcc688759_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1489d244944947ef2d023d5fcc688759_JaffaCakes118
-
Size
16KB
-
MD5
1489d244944947ef2d023d5fcc688759
-
SHA1
2c1e3f55cb3135f405eab25e1b906f18767191e7
-
SHA256
ffe7ddc532099e372658b6cd37b7d92b82e93959ad3690a496d628d03e2b9b18
-
SHA512
cec9c527fa31dcf5fc21cd7a418cd77cd9a35a657f022f1cc6fa14d49a7bc1a3336db97bc77573fe90471e9007deb85617edc1bf8524bda49f384e3e3ccdd24c
-
SSDEEP
48:6014SskGjNkJ6zclBOb009CkyD4Hb6scpFscd5ah2seP10iO0Bv7c:42gzcbI00UkyD4+Lscdax0ntdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1489d244944947ef2d023d5fcc688759_JaffaCakes118
Files
-
1489d244944947ef2d023d5fcc688759_JaffaCakes118.exe windows:4 windows x86 arch:x86
a29e41627ed10624b64fbb01fd8b76f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ