Static task
static1
Behavioral task
behavioral1
Sample
d62fab6c411d7bc4604faf2d7c1555e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d62fab6c411d7bc4604faf2d7c1555e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d62fab6c411d7bc4604faf2d7c1555e8_JaffaCakes118
-
Size
12KB
-
MD5
d62fab6c411d7bc4604faf2d7c1555e8
-
SHA1
5e90c7d2900c91ea6618adbdc29246d02613055e
-
SHA256
6af8379d7bbbd930542e2762737e6e4621eac048c00ae97bcacf7f5efdaa1f31
-
SHA512
3c082589ad2aea84a02f57f1fa4c7f8c1bab5cb0470dbf93a683c21c96ac67cc936f067f4f57e836a5abb01ca982bd025b834f0af154b1450b40c937b25979c0
-
SSDEEP
96:c2IdGVZTNNxxqEjOdeSgEn1FiGFn71yQtQKQYQ:c9IZTt8Eyk6QG57MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d62fab6c411d7bc4604faf2d7c1555e8_JaffaCakes118
Files
-
d62fab6c411d7bc4604faf2d7c1555e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ