Static task
static1
Behavioral task
behavioral1
Sample
850505235820f2a91e9cc81056cf2a1f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
850505235820f2a91e9cc81056cf2a1f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
850505235820f2a91e9cc81056cf2a1f_JaffaCakes118
-
Size
13KB
-
MD5
850505235820f2a91e9cc81056cf2a1f
-
SHA1
f3d553c220667dc7402595b600a5702f049499eb
-
SHA256
b8c1a3550392bb792a003fc7678e36200e9c49a96f02fcf05d22029e618972ab
-
SHA512
28be707c5e0ff5dc447fc2f2dd9552f1e2aa708c0c0e92ead9b436bdd80730c5fd8cb479918fd664e4ad87a9dd007fa583a6b0c436bd329157e87fc6e5b8f39e
-
SSDEEP
48:66pU/H6yZjSP1odcDm9PYKuE5BGTkHQMd3wZqGq6eekdr16b6gXzq7JE8+5HzcCJ:1byZjcoVTu1SFdAT6rCXzqFe5BYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 850505235820f2a91e9cc81056cf2a1f_JaffaCakes118
Files
-
850505235820f2a91e9cc81056cf2a1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c01043471ba7fe043ca590b1c3a72137
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetClassNameA
DestroyWindow
kernel32
CreateThread
ExitProcess
GetLastError
QueueUserAPC
Sleep
SleepEx
gdi32
GetObjectA
EnumObjects
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ