Static task
static1
Behavioral task
behavioral1
Sample
89c5c2f97b97d76b3329c94c9a89da52_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89c5c2f97b97d76b3329c94c9a89da52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89c5c2f97b97d76b3329c94c9a89da52_JaffaCakes118
-
Size
12KB
-
MD5
89c5c2f97b97d76b3329c94c9a89da52
-
SHA1
e3ab27692e38e0fdb9c68eca76642a5f6fc16f34
-
SHA256
8776c24d3771fd328373101e12fc13c85b179689cc2b6949ef08c79de62908fe
-
SHA512
43769d94ea94056ebe1af5f9c2a68e8c5ea1d5484ff9b944ce25e44caa43e2654362d6ba8f2c4f2849a8cb7cf1441cff3804f39506f0d7f207cf067b7fdce0ba
-
SSDEEP
48:65LArCvgNpjpFVO6hEK8Da648GjBa9k495qJ4Ko/NI2TYallQXHQJBq7:BrCvgTpZhB8DXyjBa9ko5kcfQXwJQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89c5c2f97b97d76b3329c94c9a89da52_JaffaCakes118
Files
-
89c5c2f97b97d76b3329c94c9a89da52_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ