Static task
static1
Behavioral task
behavioral1
Sample
6ada729178634d5fe6dd0ac53f02d81b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ada729178634d5fe6dd0ac53f02d81b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ada729178634d5fe6dd0ac53f02d81b_JaffaCakes118
-
Size
7KB
-
MD5
6ada729178634d5fe6dd0ac53f02d81b
-
SHA1
ee59e499f9e25f932b0320a96fad8d7f66bf7d47
-
SHA256
15b95abd29e75ce5a3c58f48e7b178ddef983439d56e707ba224ce5827b3017c
-
SHA512
97e5d5f08951219c9c199a69e8b4d38b8453521833c7fadc810f2744643d5e87de2b8e83c075a63fcb57d52993dc607685e9509081d3b7c1338d3518387a1a84
-
SSDEEP
48:6XFa7+z8Nx/brygC5nf1Qjt3ByO9JlTLPFFiD7mUq83VORJ8NRBv7xH:1fr/igQEVBTJlXYzq8Uzkd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ada729178634d5fe6dd0ac53f02d81b_JaffaCakes118
Files
-
6ada729178634d5fe6dd0ac53f02d81b_JaffaCakes118.exe windows:4 windows x86 arch:x86
65cdcf7f38a0fd181c6cb07d32d8f71e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ