Static task
static1
Behavioral task
behavioral1
Sample
18666e9ffd4cf719dc797ac4b915cc00_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18666e9ffd4cf719dc797ac4b915cc00_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
18666e9ffd4cf719dc797ac4b915cc00_JaffaCakes118
-
Size
12KB
-
MD5
18666e9ffd4cf719dc797ac4b915cc00
-
SHA1
f1e19fce352c522f631631b8e20aef86ba2fec58
-
SHA256
e4f3d8dbe211281398ceb743d9c9ff35db4932e28909b33c0b7032f045d2bcae
-
SHA512
b06ed550e23bd64650c937639f40c8a5cf3c1ab0300d4e6d8e42ee93a1f68c611f4e079312d4534629fd313f23aa22d3bd807b532a6cad7953ec8b9b2a4e2b28
-
SSDEEP
96:cjzFJk3H3xNb5tLmM9Pz0bMj71yQtQKQYQ:c1I1jKM9Pz04j7MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18666e9ffd4cf719dc797ac4b915cc00_JaffaCakes118
Files
-
18666e9ffd4cf719dc797ac4b915cc00_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ