Static task
static1
Behavioral task
behavioral1
Sample
4a017729be62d0c9985b03e88ecdb63c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a017729be62d0c9985b03e88ecdb63c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a017729be62d0c9985b03e88ecdb63c_JaffaCakes118
-
Size
14KB
-
MD5
4a017729be62d0c9985b03e88ecdb63c
-
SHA1
d6ec5ddcabf50301e448c033dfc3a59f5da667d5
-
SHA256
d117425d469be9acea741688f1cdfe72d49c947a0be7bbfc7e53cbecf6b93b9c
-
SHA512
16a040ed71eb2dc969aaafb5138664dacb8c088a558ac41cba1fefd6afcbbbe1663b3acdca4630f80d2db9a0d57fcdd8ca9b5da8d82026e13e5c32547af87237
-
SSDEEP
48:6Sstydj1ihQK+fl1QGZUTKWAVb30Z+knaJwxSjtGBv7H:16QjAhQK+fl1QGCT2BEZ+knaHsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a017729be62d0c9985b03e88ecdb63c_JaffaCakes118
Files
-
4a017729be62d0c9985b03e88ecdb63c_JaffaCakes118.exe windows:4 windows x86 arch:x86
55f277119406c4b77271a4a2a89f203a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ