Static task
static1
Behavioral task
behavioral1
Sample
8be030db1270fd5bd44723d3f6dcb841_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8be030db1270fd5bd44723d3f6dcb841_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8be030db1270fd5bd44723d3f6dcb841_JaffaCakes118
-
Size
21KB
-
MD5
8be030db1270fd5bd44723d3f6dcb841
-
SHA1
8adcab6fd1379f9dd0f137182bd48df4c0de4735
-
SHA256
a77c316ab5a184a870f1609605f41ca842f4df8f57b29d7ec85aa138ae3d7bf2
-
SHA512
e11e8270c3e3ef9611a8dab34d5162f984699db47a3887f35849389afc2663e8d46e944bf91b38998ee005a864f2347f60793afd2e3371a02f2b039ba6922761
-
SSDEEP
192:A0bIUcl6cWZ8ECRE4UaUIWxUT45hmpK9DQW4XFP3qpJpPUezym8tRLPfOhQ:An56cWZoIQ4g8QWPJ2s8tB3OhQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8be030db1270fd5bd44723d3f6dcb841_JaffaCakes118
Files
-
8be030db1270fd5bd44723d3f6dcb841_JaffaCakes118.exe windows:4 windows x86 arch:x86
c494458029910d0ed6df63da0b05bbd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ