Static task
static1
Behavioral task
behavioral1
Sample
de6c771b615cc3da406fb7892c48342c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de6c771b615cc3da406fb7892c48342c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de6c771b615cc3da406fb7892c48342c_JaffaCakes118
-
Size
30KB
-
MD5
de6c771b615cc3da406fb7892c48342c
-
SHA1
4ec152992d530cd7c8167735b2cee038ad1b4f12
-
SHA256
ff22a5806258f76b6776e3f08f04b4f7b088f204e34cfe0bfe73227b07b856d0
-
SHA512
a7ee219526f16ce2394dadf5ccbbd49cd2842249741dd5bcc0a69fdf3af49c075116b2bb9617eef03184fd21823c44a944f68698eb15c783ef64e92fc44dfae6
-
SSDEEP
192:Tswzbh1xPlewHuWQgSXvK+PLIcez0bWpuwzMxQ:4wzdnleyuWyKYL3ypNoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6c771b615cc3da406fb7892c48342c_JaffaCakes118
Files
-
de6c771b615cc3da406fb7892c48342c_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ