Static task
static1
Behavioral task
behavioral1
Sample
2dd1c4bdc8f682ebece92c9d6c8496cf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2dd1c4bdc8f682ebece92c9d6c8496cf_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dd1c4bdc8f682ebece92c9d6c8496cf_JaffaCakes118
-
Size
12KB
-
MD5
2dd1c4bdc8f682ebece92c9d6c8496cf
-
SHA1
f5b4e56cff650bbc6e2dc2cba4f649761a04c67b
-
SHA256
0c3784a7194ee668e315887d34c00ee63dc80ede7fd4c321c2f5a858f8e5b9f9
-
SHA512
553fe0cb8afcc328426c83a24f3965070715fe04e024e0d10a26b4d72bca420113daa89eeeef57c6edcb2763081443c2c7259e1dd49b2b131d79641a91967cd4
-
SSDEEP
96:cBlP4NhdUv/LzA5ykpqIa3hv/fPzoToiSY371yQtQKQYQ:cBlwNhSPAJoIQ/fPzq5Sk7MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dd1c4bdc8f682ebece92c9d6c8496cf_JaffaCakes118
Files
-
2dd1c4bdc8f682ebece92c9d6c8496cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ