Static task
static1
Behavioral task
behavioral1
Sample
a0dbc6d975f6e38cdff1293ec9189a60_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0dbc6d975f6e38cdff1293ec9189a60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0dbc6d975f6e38cdff1293ec9189a60_JaffaCakes118
-
Size
16KB
-
MD5
a0dbc6d975f6e38cdff1293ec9189a60
-
SHA1
dfd06bfc0c73ead40da51e116c6fe0b1ec4dff47
-
SHA256
30bd53b8a66744ad43daaba148da9792ae28be9b59aa57a4481332cb0c189cec
-
SHA512
33a1f91aabebd2d6f2764b5dccac2dd46fa12f2257e6e6d1e1e2f2adce47514bc5df66506bff031a5359bd47d0eba7017dfc4f4623fcfac0635419bc0e0e6456
-
SSDEEP
48:601VYeHmgzkvZZn2LMXhl2t8Xg67lcf+0LV9x+y2gJh2seP10iO0Bv7c:nGCa2wXI967m1Rrt2gHx0ntdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0dbc6d975f6e38cdff1293ec9189a60_JaffaCakes118
Files
-
a0dbc6d975f6e38cdff1293ec9189a60_JaffaCakes118.exe windows:4 windows x86 arch:x86
a29e41627ed10624b64fbb01fd8b76f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ