Static task
static1
Behavioral task
behavioral1
Sample
71230d3c7da6b6dfe012a050da941246_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71230d3c7da6b6dfe012a050da941246_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71230d3c7da6b6dfe012a050da941246_JaffaCakes118
-
Size
12KB
-
MD5
71230d3c7da6b6dfe012a050da941246
-
SHA1
457c10a4533978a1f32edf39c2872d44a8c9e4cf
-
SHA256
ade145f4643858531a27bbae45c7f90e3ea42adec5bedf9e0148524f2d0ec692
-
SHA512
51f2ced894669ae1c90b364f00a170c310a32f8ea42cfb4eb7a481053ca3ffa8191fcac9c5676c1374bd50213d7435ed2a6ff1dbda393c25b128839ccd07528c
-
SSDEEP
48:6hSgW20wEl6dLWpQNjx9gbCHXP46pE5sajEVFgOxHsFKfO3zqyJBmTJ4PvJnBq:3LAECjgbCHwQEyOIFgONVWzquBe43xQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71230d3c7da6b6dfe012a050da941246_JaffaCakes118
Files
-
71230d3c7da6b6dfe012a050da941246_JaffaCakes118.exe windows:4 windows x86 arch:x86
69d31e0e9242713e77170462fda3b614
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ