Static task
static1
Behavioral task
behavioral1
Sample
de3d5d36774ca744a53b1d3961ef60e8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
de3d5d36774ca744a53b1d3961ef60e8_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
de3d5d36774ca744a53b1d3961ef60e8_JaffaCakes118
-
Size
12KB
-
MD5
de3d5d36774ca744a53b1d3961ef60e8
-
SHA1
770a03ba4384927289531f2e2d4976b9938bdbf7
-
SHA256
adbfbefc3856113a10a51c723ee4c7477e3d1f79b2670c3af569e5fd7f19d714
-
SHA512
6c7ca41ba606139b2a2f4a5b05f2ade86a2787f483337a3b675d3debc3957f649c69fdbac0595d1c3a1831db5231250db372c68fdcaca11568bc03ed17d7f9d9
-
SSDEEP
96:cQnoRIu4O0qd/AO4Z4WwDtGlyX/JKTzx/epk71yQtQKQYQ:cNIrWpAO0fLlyXBytYk7MQjQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3d5d36774ca744a53b1d3961ef60e8_JaffaCakes118
Files
-
de3d5d36774ca744a53b1d3961ef60e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ