Static task
static1
Behavioral task
behavioral1
Sample
dac6cd05b25c5d567cbc76ec9c211984_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dac6cd05b25c5d567cbc76ec9c211984_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dac6cd05b25c5d567cbc76ec9c211984_JaffaCakes118
-
Size
17KB
-
MD5
dac6cd05b25c5d567cbc76ec9c211984
-
SHA1
34f2ccac2c35b34ebc3683be5ef232f03f37e418
-
SHA256
545923f68876a3a33491953092b72f7f5a03879045caac58b8f574e997ab06bf
-
SHA512
12642f9ac404596d484d8fa2f7af49883f414e0c3ec122abbf0745046dc952b178dac45fda2c43af6c46f42d56965dcfd8e44089f363592f1fa985c835ef6ba9
-
SSDEEP
96:2IMW786MULrv++mNq9cOsIYd4MA8c5Jg8wYRXrg+k5B5rzvdWrQ:gW7W0rv+nw9cl4MA8aDwYV7k5B7eQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dac6cd05b25c5d567cbc76ec9c211984_JaffaCakes118
Files
-
dac6cd05b25c5d567cbc76ec9c211984_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ