Static task
static1
Behavioral task
behavioral1
Sample
779ed9599dced37d166b6e51dedf44cf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
779ed9599dced37d166b6e51dedf44cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
779ed9599dced37d166b6e51dedf44cf_JaffaCakes118
-
Size
12KB
-
MD5
779ed9599dced37d166b6e51dedf44cf
-
SHA1
91e2794eb0f4383db360444a686eafb552126913
-
SHA256
244a5752de85b25a55a21d74eb0bafed88ec327852298348941f426522b1dd25
-
SHA512
ac8099f4b7f1cc0737eb041bba67bc62228b928d1b1c25f0d0b243ed14c45fe011928652d4ae41cb771074e1802219945f73957f4302b6b0ae73835f6c403f27
-
SSDEEP
96:KM+ldTeja5J6zrkatgjojGOWPgQzqOUZ9KKbQ:uTma5o4j9OW3N4tbQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 779ed9599dced37d166b6e51dedf44cf_JaffaCakes118
Files
-
779ed9599dced37d166b6e51dedf44cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
20cbdd7346e333dda4e8ea29f754c0b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
kernel32
ExitProcess
SleepEx
CreateThread
EnumCalendarInfoA
EnumResourceTypesA
EnumSystemLocalesA
GetLastError
QueueUserAPC
Sleep
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 342B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ