Static task
static1
Behavioral task
behavioral1
Sample
5b5c6c55206a47d450a1796d3bfb678e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b5c6c55206a47d450a1796d3bfb678e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b5c6c55206a47d450a1796d3bfb678e_JaffaCakes118
-
Size
11KB
-
MD5
5b5c6c55206a47d450a1796d3bfb678e
-
SHA1
2e2067c22023c7efc31f8c37b741fbe165c9612b
-
SHA256
b88fc3b1b897af3882b39cf1b16d46e1c711440686b95fc4fc934dde24e02c00
-
SHA512
fb78e698716c41b341f7865c23f2fa38f00b1ae7cb78057c044cf360dff8867f79ef8c5eb578d10b37060b52fd2b5adebe8e71a09fc961dd28f7a35e896cfe90
-
SSDEEP
48:6TSWBHTK/6LfWqilbNb0GEraE3So4DBUlz77A2KKHie4a4MvRTjyW7YDcUQ7UZBU:FW06L+ZN2rN4DAE7w95v5OWIo4ZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b5c6c55206a47d450a1796d3bfb678e_JaffaCakes118
Files
-
5b5c6c55206a47d450a1796d3bfb678e_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ