Static task
static1
Behavioral task
behavioral1
Sample
4415006b67b507f1e7ab1c02c98ea5c1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4415006b67b507f1e7ab1c02c98ea5c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4415006b67b507f1e7ab1c02c98ea5c1_JaffaCakes118
-
Size
12KB
-
MD5
4415006b67b507f1e7ab1c02c98ea5c1
-
SHA1
741765edb92849f9fe82f105b8f5bc5a5f34bd6c
-
SHA256
ef9319c450800064fb016b713abf0acf6c6f1b7273a569d3b338019d35d4451b
-
SHA512
87cda2465b4dae0d04192ae40cfb4d8257603dc94a64ba3f91244cf54538041576eff0deb13db835d4b529c16fb71515d981b680861fbac22604349d94ecabc3
-
SSDEEP
48:6KDPBzEacYY2XEgn3uWOGZXDmPU85oc24d+kshgS3zqJJh8GIqI4M/qMBq:Oac23uWvZXSPU8o4YksWS3zq/w4cqMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4415006b67b507f1e7ab1c02c98ea5c1_JaffaCakes118
Files
-
4415006b67b507f1e7ab1c02c98ea5c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ