Static task
static1
Behavioral task
behavioral1
Sample
f4fe184e51fcdf34f6ecc6f833628490_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f4fe184e51fcdf34f6ecc6f833628490_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4fe184e51fcdf34f6ecc6f833628490_JaffaCakes118
-
Size
26KB
-
MD5
f4fe184e51fcdf34f6ecc6f833628490
-
SHA1
6342aebb9d69d74544e356fd8562bdb43c7ba033
-
SHA256
a4e78ea40c5ac30d931194d39d55c322e446b825a0fed43f9d10c654ac667d99
-
SHA512
f60d4ec480b879b7e556fc76e978fb99c37ac1e8f6c5d8dd95bc32ce5e62606a30d6fef7dc001652124c2fe5538fe769957441deca5bd173251e58060f954879
-
SSDEEP
768:y98eKOaP5gzU8BKvC0iLpIfsaaFqt6AAMCKn:28eEP5aU8BKq0eIfLjAMC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4fe184e51fcdf34f6ecc6f833628490_JaffaCakes118
Files
-
f4fe184e51fcdf34f6ecc6f833628490_JaffaCakes118.exe windows:1 windows x86 arch:x86
067f1866d929bfc2993548805c04fac2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
user32
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
DispatchMessageA
DefWindowProcA
SetWindowLongA
gdi32
CreateSolidBrush
CreateHatchBrush
shlwapi
StrChrA
Sections
.idata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE