Static task
static1
Behavioral task
behavioral1
Sample
d2dd4e4946409bae98d243dcffaa97c7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d2dd4e4946409bae98d243dcffaa97c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2dd4e4946409bae98d243dcffaa97c7_JaffaCakes118
-
Size
12KB
-
MD5
d2dd4e4946409bae98d243dcffaa97c7
-
SHA1
b39acefac4047e1749417d1c30118c4101a84559
-
SHA256
306bd2649b78198bde6d3537d26a76342fcfbd38383d74d91a49dc8b6f04d168
-
SHA512
3d748ef860006131b0cf5139e1617a1895df90d186db904ee012a7ff5c3a25dfda4813746da8a9f0a2f5b8fa0379dc3c7fba9368bca44a4b4a5e59183b5d816f
-
SSDEEP
96:cvtSYDT2QCoJs+qXXtpvuZbJGxoj1ZOkAsKV171yQtQKQYQ:cvtSeqjoWDmQxIZOkAsKV17MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2dd4e4946409bae98d243dcffaa97c7_JaffaCakes118
Files
-
d2dd4e4946409bae98d243dcffaa97c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ