Static task
static1
Behavioral task
behavioral1
Sample
b45c275bb7df0d37af42ab038f2215a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b45c275bb7df0d37af42ab038f2215a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b45c275bb7df0d37af42ab038f2215a7_JaffaCakes118
-
Size
17KB
-
MD5
b45c275bb7df0d37af42ab038f2215a7
-
SHA1
219838e8c4a8d87a28959c8503049fc90d3f3568
-
SHA256
58b39751dd2ec41ccad8f09c619b83b3a0492fec87a8b63a3dcad1841d7a3864
-
SHA512
e5b479383519589af8635fd7e52f31a9d6c020e318a3ce3703b1f58c639a14aa1051440b31a30190675abc8ccf6d447ee5b2731bf597459e87770594b43ec043
-
SSDEEP
96:2oci0uWkQkfxsZRz7hvOjKusc8w4gufLPTMOC0B5rzvdWrQ:fcldLzVOGLXw4girMOC0B7eQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b45c275bb7df0d37af42ab038f2215a7_JaffaCakes118
Files
-
b45c275bb7df0d37af42ab038f2215a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ