Static task
static1
Behavioral task
behavioral1
Sample
1bdd2f79fbef7aeb5acde13b40764c6a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bdd2f79fbef7aeb5acde13b40764c6a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1bdd2f79fbef7aeb5acde13b40764c6a_JaffaCakes118
-
Size
12KB
-
MD5
1bdd2f79fbef7aeb5acde13b40764c6a
-
SHA1
78a9ddc042c7af51d19f5d3239a4f90a2d2db9b2
-
SHA256
a0de68f15016342ee1b97fa8fba8eefb65504b32a85b9f7bd561efd56f24158e
-
SHA512
4a57380b01b254b2476a24a8ff6a5f00229fd86027153cf99e68f7abc50a11aa8484cd2875b0c961a8eb91cdb14272af3e1f9e0fd8c78b5893b2fb2f2fa0fefc
-
SSDEEP
48:69nTdS68rXkqIUbovTCfjr9CHd1MsxHsxoTD1zqRJLsQ4oBq:EdS64XkqIHvWLr96XMxARzqHp4oQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bdd2f79fbef7aeb5acde13b40764c6a_JaffaCakes118
Files
-
1bdd2f79fbef7aeb5acde13b40764c6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
69d31e0e9242713e77170462fda3b614
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ