Static task
static1
Behavioral task
behavioral1
Sample
5cf7b95527159489d15a5629c6e86779_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5cf7b95527159489d15a5629c6e86779_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cf7b95527159489d15a5629c6e86779_JaffaCakes118
-
Size
16KB
-
MD5
5cf7b95527159489d15a5629c6e86779
-
SHA1
cc960862679e69f30d22a6ed614c6334fa751b73
-
SHA256
d5ded811b9e289991885a7981031eff0d61022c7797cf1f5578a11d224bb3efb
-
SHA512
1a4629f4ec1bebd96d0b825e3e5c176b4ab00098917a89bd6587d4ceb89a57669b404be2cf810895c5ad799c1b0a9517cb0939ec8ff8fad2794abe9ade2ebaed
-
SSDEEP
96:a8fG1sMA6ZlToMiKPcc/h4GspZ3oz4QQ:axjAMos0Kz8Z3jQQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cf7b95527159489d15a5629c6e86779_JaffaCakes118
Files
-
5cf7b95527159489d15a5629c6e86779_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ