Static task
static1
Behavioral task
behavioral1
Sample
5e2134fb06fc068c0da046701718c8e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e2134fb06fc068c0da046701718c8e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e2134fb06fc068c0da046701718c8e5_JaffaCakes118
-
Size
13KB
-
MD5
5e2134fb06fc068c0da046701718c8e5
-
SHA1
e6a4b5f062a9de52b9cfb22e404e8c43f84d5763
-
SHA256
5faf1f27e41664e49025bd815c1888c58e385f0eb51b26442bc4492abe5d3471
-
SHA512
91870db8d1dea3eb9cfc9c51fdb5e7299894d6da60b7dcf4fded77155a4be32e08045748d3683eb8f61fc050c58ac051f106f358142722fc05701e22c18ddded
-
SSDEEP
96:ILnSl6pcMM7b4PDfb+oEzJtC3sRmmEmKLjKgJ8c9shzOKvQ:ILnSl+cMM7wDfybEjmEmKLjNh9szQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e2134fb06fc068c0da046701718c8e5_JaffaCakes118
Files
-
5e2134fb06fc068c0da046701718c8e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
c494458029910d0ed6df63da0b05bbd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ