Static task
static1
Behavioral task
behavioral1
Sample
8dd1db22b3c97ca5e8a3aaee53e2dbfc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8dd1db22b3c97ca5e8a3aaee53e2dbfc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dd1db22b3c97ca5e8a3aaee53e2dbfc_JaffaCakes118
-
Size
30KB
-
MD5
8dd1db22b3c97ca5e8a3aaee53e2dbfc
-
SHA1
9d3c43f12b0b5c50d243b7c4003c64c202e1b431
-
SHA256
4569650bf3a3c5d03352fe6dc69e361ab3d2ccd7625c2394b618b84f6edb2d16
-
SHA512
9a90f2346e9c1de904550338192faeab0a9301cb84ab3d56c9d63b26058a5263b4946da28df15ec8bcb71837c532cb63f2e1cb9003bc4579c0d6791254d448ba
-
SSDEEP
192:P1zCYOYIoso+yxejfDlpPQDopqliOwpUZT33zMxQ:lCYpsdycrwDzsfIjjoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dd1db22b3c97ca5e8a3aaee53e2dbfc_JaffaCakes118
Files
-
8dd1db22b3c97ca5e8a3aaee53e2dbfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ