Static task
static1
Behavioral task
behavioral1
Sample
41e91a4dd7470bc637b1037da9bbc0cc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41e91a4dd7470bc637b1037da9bbc0cc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41e91a4dd7470bc637b1037da9bbc0cc_JaffaCakes118
-
Size
17KB
-
MD5
41e91a4dd7470bc637b1037da9bbc0cc
-
SHA1
fe321aab17e3c7c571c0dfa24c33ddd7c7079f45
-
SHA256
8e6bf8244c5f01c8eb29a5b530cfd9a0b0c2945799639fcea7bed574fb0d13b0
-
SHA512
bf0edfcb27f92c89b90c3ad3313c8b456ae298a5ce355d016bbe76ae0c84b79c576ac21a7f59c90d7a1a66c057e43f8432e4c9d6f4082ce4156dcb24b10ca25a
-
SSDEEP
96:2GswdUdAE61u/NAfLuQA5TeAJ4B5rzvdWrQ:dFdUeSNcQr4B7eQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e91a4dd7470bc637b1037da9bbc0cc_JaffaCakes118
Files
-
41e91a4dd7470bc637b1037da9bbc0cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ