Static task
static1
Behavioral task
behavioral1
Sample
42a504baa736315443bb5bbeecb29290_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42a504baa736315443bb5bbeecb29290_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42a504baa736315443bb5bbeecb29290_JaffaCakes118
-
Size
30KB
-
MD5
42a504baa736315443bb5bbeecb29290
-
SHA1
883c5c5c832c66b2a7c9a14fc70a8cc7fad82916
-
SHA256
edf901532b205dc88ba5c4e05e67c21aca9ae0f559a1bd339de6275d0cb2b3e3
-
SHA512
fed46a280e71321836d2c1dc1bc16d06f481279835651e2fd691ce8b35bde04320fff76bc7232014dff99bc4f3f83d22b7b999e499e0ba782f82d3894c27d3cf
-
SSDEEP
96:ad+7S/vMf8mAC4ivUNnDVYFe0mFPfwJ/qpT33vbzzMxQ:O+70EfbAC4isvY0J3wqT33zMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a504baa736315443bb5bbeecb29290_JaffaCakes118
Files
-
42a504baa736315443bb5bbeecb29290_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ