Static task
static1
Behavioral task
behavioral1
Sample
b845e7191239ada07a0a0570c0a9d819_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b845e7191239ada07a0a0570c0a9d819_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b845e7191239ada07a0a0570c0a9d819_JaffaCakes118
-
Size
12KB
-
MD5
b845e7191239ada07a0a0570c0a9d819
-
SHA1
4e3c693113f412a55d82d69e7abb87298b04100c
-
SHA256
271f45d94f793539aca6a7bccf481c78183f8e1f9a236e103493158917589ec4
-
SHA512
f3b0134bc95caea592dd8a711cabd1fdc72566172b40aa3672345cec729113c0c2985a9aaa62f6843ad9603c2c1a0c13a666b3f0a6ca277352b8f5b08e5ac62e
-
SSDEEP
96:cg63BL5en93EWGYxpKadWJT5KM8P71yQtQKQYQ:cgUA90EpKPJtKzP7MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b845e7191239ada07a0a0570c0a9d819_JaffaCakes118
Files
-
b845e7191239ada07a0a0570c0a9d819_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ