Static task
static1
Behavioral task
behavioral1
Sample
61cbe66021a98824de391ffc1e56b3ec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61cbe66021a98824de391ffc1e56b3ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61cbe66021a98824de391ffc1e56b3ec_JaffaCakes118
-
Size
13KB
-
MD5
61cbe66021a98824de391ffc1e56b3ec
-
SHA1
fa79a442928d276d6f3fd1ac78fcd3b22e1ee41f
-
SHA256
9c9f17bb00c4e299cc285e91e0af9e1617904468f6bbd205ade1d5bfda45baa4
-
SHA512
80737835de9978e145fb1ddd70265850cf4d6bd356b0516d3d7dd73904f011402ac6b52025b39fa280d8083f2a97e439cbce151b4240b1a1e187fde9ff724830
-
SSDEEP
48:6QnQTALo34+iIgAVH5SE74ANZ7KNLY0ohc6hrm6DW/xBv7E:i0Lo4+iNAuEBCYdhc6hSoW/xd4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61cbe66021a98824de391ffc1e56b3ec_JaffaCakes118
Files
-
61cbe66021a98824de391ffc1e56b3ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7644d07f61566e0ee66f6a791013e57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ