Static task
static1
Behavioral task
behavioral1
Sample
749ae7200f02d98cc20fa9ef08c5d3e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
749ae7200f02d98cc20fa9ef08c5d3e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
749ae7200f02d98cc20fa9ef08c5d3e8_JaffaCakes118
-
Size
12KB
-
MD5
749ae7200f02d98cc20fa9ef08c5d3e8
-
SHA1
497d1c217cbffe0b09d0a4bedd34aee7044e702a
-
SHA256
a119cdd197cead226168bad61d2d700a1084bd4b46659206c6103b9d8d44e5be
-
SHA512
28a3af5e0b703d6d760bc8db4fb3c53e9529a552865cb91c26c155d048e2828a7516858017c2d6ad5cddd1380cab7f3bf6bfce78b906ef7e0655a4feec5f668d
-
SSDEEP
96:84Pb2+QftZ86ufPv/1OC0fsnnPd9TzqUsx3Vde4OQ:lC+eZ89ff1ODfsPvTf224OQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 749ae7200f02d98cc20fa9ef08c5d3e8_JaffaCakes118
Files
-
749ae7200f02d98cc20fa9ef08c5d3e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
3d1a74f28558ea9d8eb482e6798f3dde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterHotKey
DrawMenuBar
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ