Static task
static1
Behavioral task
behavioral1
Sample
7010e7cad86158ac56e8dff8fcbad68b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7010e7cad86158ac56e8dff8fcbad68b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7010e7cad86158ac56e8dff8fcbad68b_JaffaCakes118
-
Size
21KB
-
MD5
7010e7cad86158ac56e8dff8fcbad68b
-
SHA1
8ec7e5d2ced432634e3e5d709f6079a702b7d2bb
-
SHA256
ffe9c59239ed17f4b24b4cded707cabe7bbd0e05fa51cac023dbe20cc6ef48be
-
SHA512
aba7a729a59f35ded2cdf1038e4a266daede2bd3ad800db062d250b60ff37e108f98c2491e86bee91c4cde30c19ae42e15eacdd4f282816924aab66bd0778b4b
-
SSDEEP
384:Au4I1eXrPlfTNhXowpkwe5QLWTn5NZG3OhQ:AmwLlfTz48kD5QLE5N0e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7010e7cad86158ac56e8dff8fcbad68b_JaffaCakes118
Files
-
7010e7cad86158ac56e8dff8fcbad68b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c494458029910d0ed6df63da0b05bbd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ