Static task
static1
Behavioral task
behavioral1
Sample
d4d6babc917aecd93a6deb1b42b28ff5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4d6babc917aecd93a6deb1b42b28ff5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4d6babc917aecd93a6deb1b42b28ff5_JaffaCakes118
-
Size
12KB
-
MD5
d4d6babc917aecd93a6deb1b42b28ff5
-
SHA1
686ff3af79c60decee5f66dc1c8a86684f5aece0
-
SHA256
477a6f9c83d1a37f9c921a436a1950321216bf0db972f2acf9cb685300124a78
-
SHA512
5d73d29ff9d9ee134fd04eb5f52aff9be61bea62160fc7d00cd6fa031d8cee156f593b122aff7d9de8566efe28841aa82b5ad5628b36709bff4db5a13ae0ef00
-
SSDEEP
96:3t9QDf/YS25AHxMRojR5lh484dXWzquBe43xQ:3r8/E5ujrlZtBe4BQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4d6babc917aecd93a6deb1b42b28ff5_JaffaCakes118
Files
-
d4d6babc917aecd93a6deb1b42b28ff5_JaffaCakes118.exe windows:4 windows x86 arch:x86
69d31e0e9242713e77170462fda3b614
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ