Static task
static1
Behavioral task
behavioral1
Sample
1c4da6476d7309e048812ac4da67a577_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c4da6476d7309e048812ac4da67a577_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c4da6476d7309e048812ac4da67a577_JaffaCakes118
-
Size
7KB
-
MD5
1c4da6476d7309e048812ac4da67a577
-
SHA1
e343f3ebed773462a9eaea959f430226577861c5
-
SHA256
8973f8d5310447facb54c0666c04c087d6c62d369d6376e9a9cb03f2ed15beba
-
SHA512
1560e58f59dccabeb1922dbb32c0eb043efa7db8d0abca598bee7084a6c6960a4cc7c820c50e8f7ede230a83baaed3001d4f4d8775a6db6b005ee32491f39a88
-
SSDEEP
96:/CSVuhDbYP8PHJognD4g5uwTUyODVMFZk+Dfs:q6uh68PHJo+D4g5fuDVWZpD0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c4da6476d7309e048812ac4da67a577_JaffaCakes118
Files
-
1c4da6476d7309e048812ac4da67a577_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad690c9f95628617dbbea9a586488517
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
WaitForSingleObject
user32
RegisterClassExA
DefWindowProcA
CreateWindowExA
Sections
.text Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE