Static task
static1
Behavioral task
behavioral1
Sample
b00f558598291f04f7795c8fa833a0d6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b00f558598291f04f7795c8fa833a0d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b00f558598291f04f7795c8fa833a0d6_JaffaCakes118
-
Size
12KB
-
MD5
b00f558598291f04f7795c8fa833a0d6
-
SHA1
e3695cfdbae875b1d733d5c81efa30a40156159f
-
SHA256
4a1190edfa718fa2962c8e3d812ec137e639d97b52313e35a090f7d031fc007b
-
SHA512
d5fbb4ecf9479e8e25cf2146f3669bf53448f1667aed974ac37db611413605fe8959ad11a22be1434dd8243eb4ed5fd999b18cf73e607f4ed5aff1fd91f2331a
-
SSDEEP
96:cOyMm4KgLxm7gHddtcR1Nw71yQtQKQYQ:cOugLogHPtq1i7MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00f558598291f04f7795c8fa833a0d6_JaffaCakes118
Files
-
b00f558598291f04f7795c8fa833a0d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ