Static task
static1
Behavioral task
behavioral1
Sample
149e927efdc2d49de7e17da5b2e0b99f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
149e927efdc2d49de7e17da5b2e0b99f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
149e927efdc2d49de7e17da5b2e0b99f_JaffaCakes118
-
Size
11KB
-
MD5
149e927efdc2d49de7e17da5b2e0b99f
-
SHA1
1b71f21f3506c43382d4955c63209a521cd64ee0
-
SHA256
336a4a33a0da123d0c9d143157d6ffb09061c02bd87c09722448cacadb0d4400
-
SHA512
1664eb63aa8a3a5828b7244d3bac260ce5a691b937fc70b0e25a6cf94dce9f5e943fe6f6f60498a3f9f07ed1dbda209edb9a3211d92a23d2c97d87dc539be930
-
SSDEEP
48:6TKugQs4N4iuSyhP7NpHERMqSlqrTBdpCTwN4JdfAImn7YDcUQ7UZBq7:UBs4N8N7EfrYwNoiIo4ZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 149e927efdc2d49de7e17da5b2e0b99f_JaffaCakes118
Files
-
149e927efdc2d49de7e17da5b2e0b99f_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ