Static task
static1
Behavioral task
behavioral1
Sample
7219158ea10991bd961fb6e2eb14f95a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7219158ea10991bd961fb6e2eb14f95a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7219158ea10991bd961fb6e2eb14f95a_JaffaCakes118
-
Size
30KB
-
MD5
7219158ea10991bd961fb6e2eb14f95a
-
SHA1
3ba7e89923e96b145246f56561a66251387f8a00
-
SHA256
cdb1be8859b52cbfb57178ca76b39bf9c45e3b22493124c1a1bc180eae37c000
-
SHA512
bf3fd62ab3ce75ba1baf258ab4348a78933dcf572c6d1240581adc2c77ce619f83ea1f46f16a2a12b6a14304d8d513a79d2f4085f5c729f67c21d2d755414860
-
SSDEEP
96:aFWuMFUkupXw8pNIG9CniT/aO2V4xJDMME7HhFoPlOqpT33vbzzMxQ:nxuF7uG9YiWO2VQVMMcH8tT33zMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7219158ea10991bd961fb6e2eb14f95a_JaffaCakes118
Files
-
7219158ea10991bd961fb6e2eb14f95a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ