Static task
static1
Behavioral task
behavioral1
Sample
5ebb49aa32a79946608ebd6b6b7f819d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ebb49aa32a79946608ebd6b6b7f819d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ebb49aa32a79946608ebd6b6b7f819d_JaffaCakes118
-
Size
30KB
-
MD5
5ebb49aa32a79946608ebd6b6b7f819d
-
SHA1
820575ec4e2c892ce50cbe141b77efbb25326cb8
-
SHA256
4c254fbcfd3026ac1dab4e5eae00452e91840d498b716b5d80f3106dcb17aebc
-
SHA512
6228fde552072e2bf96d82d117aad9e2165b313fb2ea7d2db8fb97b4f00af5376b87d6bd6878692baa040a52027dabff39d774f4abd43bcaa99668a2aa4967a3
-
SSDEEP
96:aF7gDPhYJnxPV6goemWf2XP5AcF4fVqrxzu9W/QqpT33vbzzMxQ:FhY1xNDzuXhAIOVqEEBT33zMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ebb49aa32a79946608ebd6b6b7f819d_JaffaCakes118
Files
-
5ebb49aa32a79946608ebd6b6b7f819d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ