Static task
static1
Behavioral task
behavioral1
Sample
452586ba3119c29a23a263cbc5c3d3d6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
452586ba3119c29a23a263cbc5c3d3d6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
452586ba3119c29a23a263cbc5c3d3d6_JaffaCakes118
-
Size
31KB
-
MD5
452586ba3119c29a23a263cbc5c3d3d6
-
SHA1
4d4c5e2864815e1499a5d4cc8d2bdd0a0abbbb82
-
SHA256
a3dfbde18f6fcd50e057d6e1cbd83c5990088b068943e83962e5044e1d8821b4
-
SHA512
5b9e110b6b2743514c47d3099b40015214b0187bb6a7f54cc10de588f9e94c15c9865568a2bdf7d82af893e68f971b538adc040e2b0c1c4ad169df78ec646242
-
SSDEEP
96:uwtJUp0ngL2Qj0dgEEM8WM4VcJo04qoR3kiIzUqJIHQ:uGaYiX0dgn9WbmiqoVIowIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 452586ba3119c29a23a263cbc5c3d3d6_JaffaCakes118
Files
-
452586ba3119c29a23a263cbc5c3d3d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ