Static task
static1
Behavioral task
behavioral1
Sample
d58e18e7517ecee759852a61e883e437_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d58e18e7517ecee759852a61e883e437_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d58e18e7517ecee759852a61e883e437_JaffaCakes118
-
Size
30KB
-
MD5
d58e18e7517ecee759852a61e883e437
-
SHA1
adc6059dca7c2225515cae8ec64229945de93148
-
SHA256
bee9d485726b3bb8241bc154326d6759ebba0351f7197902d718e50de50c845a
-
SHA512
667d37c99f59d223c07dfcec698bb6a21680008951fe43ec5fab5d4afee96cd4f536e0ab90c92339540968a2215b5f6219fd89c66193ca77d5fb95766bd0e380
-
SSDEEP
192:XBmZnozWHc8w2/NQ58PfUpf4KF5/sESGQ:gZgWHc8w2U8PfKb+GQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d58e18e7517ecee759852a61e883e437_JaffaCakes118
Files
-
d58e18e7517ecee759852a61e883e437_JaffaCakes118.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ