Static task
static1
Behavioral task
behavioral1
Sample
bacafba492de908e984a362274588d10_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bacafba492de908e984a362274588d10_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bacafba492de908e984a362274588d10_JaffaCakes118
-
Size
30KB
-
MD5
bacafba492de908e984a362274588d10
-
SHA1
1b5413c12686cced95870a4be91692b3ee41a100
-
SHA256
a844cd6d15fb6a3fe88b22a7a9103a263beb39d936dfe28b25d69f4c70d5cf32
-
SHA512
ba54833d622d24f513fe096cc52761329931518dca4e1e372a816f96d2f2b93b677410a37317d35fb13166acc74558fdcee8b02c7d2a7466ee53afd076676739
-
SSDEEP
192:HwLtnSDTZE8Lfv28F/HNSj/prJxg7VZmWvOSNmSc7T33zMxQ:USn/JHNS9k7fmHSc7jjoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bacafba492de908e984a362274588d10_JaffaCakes118
Files
-
bacafba492de908e984a362274588d10_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ