Static task
static1
Behavioral task
behavioral1
Sample
e0119d60707cba876ecc029dfd4e5b5b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0119d60707cba876ecc029dfd4e5b5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0119d60707cba876ecc029dfd4e5b5b_JaffaCakes118
-
Size
30KB
-
MD5
e0119d60707cba876ecc029dfd4e5b5b
-
SHA1
7abd2f0eb83cc406b278c47b3bee93068d9678a8
-
SHA256
cbb6aa079bf87d363cb3a3c8037848b0a1d42eb0129fcac1476d829d91db9e5d
-
SHA512
e0f01cd9ec6132ab9afca41317e512c5fbd9455b4907c46e13b94294ecf9eeecca3c7454d7cd113001fb77c4ea7d3ffbad5f3f2b06aaacce6b7f2ec6bb95ab95
-
SSDEEP
192:GRv7Q+IKxXksKq377pHs3y0fUpf4KF5/sESGQ:czxzXk27dMNfKb+GQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0119d60707cba876ecc029dfd4e5b5b_JaffaCakes118
Files
-
e0119d60707cba876ecc029dfd4e5b5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ