Static task
static1
Behavioral task
behavioral1
Sample
475784789a63113bf17f78cf0cabbb0d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
475784789a63113bf17f78cf0cabbb0d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
475784789a63113bf17f78cf0cabbb0d_JaffaCakes118
-
Size
12KB
-
MD5
475784789a63113bf17f78cf0cabbb0d
-
SHA1
75a6ead50a40ff74a6d7682ef1e28438b71eea7a
-
SHA256
414dec783fad8dbed1cc37c76d55d7f408be8396da2785c4995a23c944fa5117
-
SHA512
afac9ca7d34ab5f9ec0604bc58d15de6fdd78abff5bf0a00f26871c950cb06ab32ec1096a6756fdca997e6b9a749d8195f24a9b50196f4189a5a4494c62e3d4d
-
SSDEEP
48:6KDP02onQVj6CQkfpXIc1LXx0b5fOGxAXp6VAQzZowyu70xjx6FYFCSI3zqJJh8E:cI6aLh0MGOXpwHyljx6Ft3zq/w4cqMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 475784789a63113bf17f78cf0cabbb0d_JaffaCakes118
Files
-
475784789a63113bf17f78cf0cabbb0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ