Static task
static1
Behavioral task
behavioral1
Sample
1c8e68ddd65ddd3a34c8c9a58e5ff08a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c8e68ddd65ddd3a34c8c9a58e5ff08a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c8e68ddd65ddd3a34c8c9a58e5ff08a_JaffaCakes118
-
Size
12KB
-
MD5
1c8e68ddd65ddd3a34c8c9a58e5ff08a
-
SHA1
04f8b7bc88f009ca9b69053a8850839431b0c77e
-
SHA256
26cc9255690064fc36540af37561d006e9f7da02e8456d9818722ff327a57323
-
SHA512
6d9f73984ef54d2db56ae21b99ba365a7d5c019ce6f9f2fc27a30d443d8e71ff2a8f59a9d73bb9194af47a1916a9c42740c5fc33f16c1dae5256219b24c66172
-
SSDEEP
48:65LAbG2UiRgCgjtU8xveZTXKBCyqQpN9Sxx3EfCWEMQaTYallQXHQJBq7:B/gFjqS7CyqUIzMQaQXwJQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c8e68ddd65ddd3a34c8c9a58e5ff08a_JaffaCakes118
Files
-
1c8e68ddd65ddd3a34c8c9a58e5ff08a_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ