Static task
static1
Behavioral task
behavioral1
Sample
abcaf738e20590cc34b5ab7c1130ef84_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abcaf738e20590cc34b5ab7c1130ef84_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abcaf738e20590cc34b5ab7c1130ef84_JaffaCakes118
-
Size
3KB
-
MD5
abcaf738e20590cc34b5ab7c1130ef84
-
SHA1
19c868d537d7ae1598895db1f295cab4c08b9417
-
SHA256
d4d33e690d56e9d7550ab9806c99904c00bf54c3fad68b41fad8e535ddda2790
-
SHA512
460f2a25058f0e0e83739c46d8e9f7054633fe498600f6ae451bf8f2da79eb4a1ed7d7b20aee0cae7030e41c378e9c726e48ee325a6b81e99743565297e79d41
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abcaf738e20590cc34b5ab7c1130ef84_JaffaCakes118
Files
-
abcaf738e20590cc34b5ab7c1130ef84_JaffaCakes118.exe windows:4 windows x86 arch:x86
ef76055c162e902cfa066514a7028408
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ