Static task
static1
Behavioral task
behavioral1
Sample
3c1669ae1c221d7b75188bb65c2e66db_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c1669ae1c221d7b75188bb65c2e66db_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c1669ae1c221d7b75188bb65c2e66db_JaffaCakes118
-
Size
14KB
-
MD5
3c1669ae1c221d7b75188bb65c2e66db
-
SHA1
140f40b92a4cf96a7a48c4a2c42a98cf796f9164
-
SHA256
108a60927b98b20b5cf7e2b95c3a1e65c6628c7bbd64f290cc844868cce0236c
-
SHA512
e18e339228a5fdb9e5e4ae0ea0ec03f02670503a72acdfdd0de47929873e0e21afac6d9fae6e8e0eea7a41806dc2695f5bf4b22d474994743957af7c594c1efc
-
SSDEEP
48:6SsO92gyZdiBxnORjz3Eb2YGTuFHR9E6CJaSxSjtGBv7H:1AgjCGbl99E6CYsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c1669ae1c221d7b75188bb65c2e66db_JaffaCakes118
Files
-
3c1669ae1c221d7b75188bb65c2e66db_JaffaCakes118.exe windows:4 windows x86 arch:x86
55f277119406c4b77271a4a2a89f203a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ