Static task
static1
Behavioral task
behavioral1
Sample
b73786679397cf0c0285fef0348ffaf2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b73786679397cf0c0285fef0348ffaf2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b73786679397cf0c0285fef0348ffaf2_JaffaCakes118
-
Size
30KB
-
MD5
b73786679397cf0c0285fef0348ffaf2
-
SHA1
4162ba5bf40fe63aed472d0dba41125c079fd722
-
SHA256
807e3d417e4dd8585f1ba33b3870e774251a006b17df2382857894158e204ee8
-
SHA512
4327f67288769a4fe6999d819692f6f5885af3b153a25d97e8b85981beb3e9636c0e18d730f2ed33359fbc4ffb1e1f1b07f7e3ebf5ebc1588401bd8463d953a1
-
SSDEEP
192:tbVOpj+FwL6zKX83KeKpFVnEv1T33zMxQ:JVy+FwE24KpFq9jjoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b73786679397cf0c0285fef0348ffaf2_JaffaCakes118
Files
-
b73786679397cf0c0285fef0348ffaf2_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ