Static task
static1
Behavioral task
behavioral1
Sample
2a939df0103339ad43ff72e7fdcfd2f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a939df0103339ad43ff72e7fdcfd2f1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a939df0103339ad43ff72e7fdcfd2f1_JaffaCakes118
-
Size
7KB
-
MD5
2a939df0103339ad43ff72e7fdcfd2f1
-
SHA1
888a4636fbdd2c7001488055880d79f9bcab8c71
-
SHA256
e4cc250f9c4c6c61899c7778e14b820398e82c1aac3792e167892dbfe21c2f02
-
SHA512
87212175a0875b68a5a18185503f7e8cc78b47fc9e09eba0b00de6adb09de4d977e0247c33502d1755a2c5cf51fc00c72112c23b308cce39e6f11b64fe51b2b5
-
SSDEEP
48:6jlFGQFInGovO0nLKz+6ZxtnD7oAcq3z6C2z65mctcM1PuEBSpBv7xH:KNFIvbLKiotntcQSCm0ckum6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a939df0103339ad43ff72e7fdcfd2f1_JaffaCakes118
Files
-
2a939df0103339ad43ff72e7fdcfd2f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
65cdcf7f38a0fd181c6cb07d32d8f71e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ