Static task
static1
Behavioral task
behavioral1
Sample
8de169b43a198c3dde67db58c3ef3b24_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8de169b43a198c3dde67db58c3ef3b24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8de169b43a198c3dde67db58c3ef3b24_JaffaCakes118
-
Size
12KB
-
MD5
8de169b43a198c3dde67db58c3ef3b24
-
SHA1
6f07620119eaf4fddff1c288a83bf3a8618da28b
-
SHA256
f9b41f8ef9b01533cc71a9e039e8b733ae5dbf90fd68d957660d2f112b1e9eb3
-
SHA512
df3d9815d44dbe89839b35c4fbe1fe6b7431fb007a8854060c726db850b9e60dc9af8276a639f25b4dff102a5afd18ccef2fc5f5b0e5590c64a3c03fe226b8e5
-
SSDEEP
48:6KDPZOT6tk70/zvSDvmlXjEkF4gr8W2TEN3cEDB8C5R9ylP3zqJJh8GIqI4M/qMQ:QK0DvwzEhK8W2TERBHaP3zq/w4cqMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8de169b43a198c3dde67db58c3ef3b24_JaffaCakes118
Files
-
8de169b43a198c3dde67db58c3ef3b24_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ