Static task
static1
Behavioral task
behavioral1
Sample
de5194ec89f35c9210ea2035b0d8ddea_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de5194ec89f35c9210ea2035b0d8ddea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de5194ec89f35c9210ea2035b0d8ddea_JaffaCakes118
-
Size
12KB
-
MD5
de5194ec89f35c9210ea2035b0d8ddea
-
SHA1
222abe10cdfff9b4c5501378d544196c6ebae034
-
SHA256
96ffae611bbc29bc741c1f0236bbb60940962b4b1468d99e2296c0d7416838aa
-
SHA512
a135e810114527c7810f0078106d98bf80781c523a632afb789b5c378a64c1a9b94100a7afe30e056fa7ecbacaca2ce24c8eaf4afcbd0367dbaaca3ed71b4869
-
SSDEEP
48:6KDP+aaFO6mVqvWMRGY4quweJK85CRrdgz2fySO68i3zqJJh8GIqI4M/qMBq:qjRMwx+/1K9vkgui3zq/w4cqMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de5194ec89f35c9210ea2035b0d8ddea_JaffaCakes118
Files
-
de5194ec89f35c9210ea2035b0d8ddea_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ