Static task
static1
Behavioral task
behavioral1
Sample
1bfe43d8d910bba5b81e0659fabaf93d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bfe43d8d910bba5b81e0659fabaf93d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bfe43d8d910bba5b81e0659fabaf93d_JaffaCakes118
-
Size
14KB
-
MD5
1bfe43d8d910bba5b81e0659fabaf93d
-
SHA1
c223ca9589bc37598e47a9f62e88a7acbfde8591
-
SHA256
3b3292ad734649e7e1f404ba1dd6d5105a0074eb3bae336fd760e2c87c485754
-
SHA512
d4b1b384c61ea7bc1bff09ac6b78aedcca0d7e295b5248e55cd2db62690a7b5f03bbea7f90edf30afad6617d13c89e889691aded8b474b5aa60d0294e54620d7
-
SSDEEP
96:zpb5201nce1fEnjvVTA3m4MYOhdyB3yXBB8tMvpQ:zpbZceOjvFWm4M1hsCX0tMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bfe43d8d910bba5b81e0659fabaf93d_JaffaCakes118
Files
-
1bfe43d8d910bba5b81e0659fabaf93d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c494458029910d0ed6df63da0b05bbd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ