Static task
static1
Behavioral task
behavioral1
Sample
87fe313cac483f27bbb28f3956e9506d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87fe313cac483f27bbb28f3956e9506d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87fe313cac483f27bbb28f3956e9506d_JaffaCakes118
-
Size
12KB
-
MD5
87fe313cac483f27bbb28f3956e9506d
-
SHA1
3282e03f4fee73abb351e73032630765b5753586
-
SHA256
cbbc5eba9322104e155cce86e918fd39b75786a3491ad575d5f20680d38bdcf0
-
SHA512
1334c1bc64dc9a49563306dd70c482d2c8638e414eb2d9e7aff3a6c4b5e527a123b1954b0d8bbed32a08e849da7c4345f0c4bb40c192f7d5117fc4069356c1c4
-
SSDEEP
48:6bk6HafC8tMnoVtUIq/hVgJ3kR8S/rBGsaqlIdSTf9Bv75durlD:CHafC8enoI/hJR8mrB56dSBd9duxD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87fe313cac483f27bbb28f3956e9506d_JaffaCakes118
Files
-
87fe313cac483f27bbb28f3956e9506d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a8ad693bf3b8adc2d596efb901f48374
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ