Static task
static1
Behavioral task
behavioral1
Sample
af8d977f85f1e6551f4a960284fdbc1d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af8d977f85f1e6551f4a960284fdbc1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af8d977f85f1e6551f4a960284fdbc1d_JaffaCakes118
-
Size
12KB
-
MD5
af8d977f85f1e6551f4a960284fdbc1d
-
SHA1
1b12b7ff7feba64b3efda52de942a35e7c215199
-
SHA256
44d3ed9a8989a49d60d0137fb1691b136f44c844440442442e10d64d773e0ee2
-
SHA512
fbb91acbfd8252f0bf93325c3b47afc90921c8cf3812140ad705544da89b28a11212d61144a314175f00081bf5140cee61b10e16d887fb92d0d75fa567fdb945
-
SSDEEP
96:c98o37JDw65Yb6E2NWGLPhZBPgQzqOUZ9KKbQ:c9V3N5Ybtyp3N4tbQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af8d977f85f1e6551f4a960284fdbc1d_JaffaCakes118
Files
-
af8d977f85f1e6551f4a960284fdbc1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
20cbdd7346e333dda4e8ea29f754c0b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
kernel32
ExitProcess
SleepEx
CreateThread
EnumCalendarInfoA
EnumResourceTypesA
EnumSystemLocalesA
GetLastError
QueueUserAPC
Sleep
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 342B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ