Static task
static1
Behavioral task
behavioral1
Sample
bd680d6299b7816238c911618139ed08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd680d6299b7816238c911618139ed08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd680d6299b7816238c911618139ed08_JaffaCakes118
-
Size
11KB
-
MD5
bd680d6299b7816238c911618139ed08
-
SHA1
5f47dd02340ad2bf1221f757da9a7718d439c58e
-
SHA256
c28b375faa5e92f160605f740b9f45bf2f191a0174fbf67ac19caae9b0e474e9
-
SHA512
f9b9e57049ed626aa5a507cd9ddd0f5a5a4a0fa70ae636d32ba184bfff0615a4d8a717b9cbfa94f82074cc07ba1ff9839ada2707f83de52dd7af92a0031f56ff
-
SSDEEP
48:6TE0YzV9gaKSV7TZn0/tLXk8gUB5Ndkf6kEZB6JBn3mECt7YDcUQ7UZBq7:j0YzVFKStZ0/ZFlvkrpBnWEWIo4ZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd680d6299b7816238c911618139ed08_JaffaCakes118
Files
-
bd680d6299b7816238c911618139ed08_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ