Static task
static1
Behavioral task
behavioral1
Sample
f5473f840f9de710e3cb3e4bbfd9fd75_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5473f840f9de710e3cb3e4bbfd9fd75_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5473f840f9de710e3cb3e4bbfd9fd75_JaffaCakes118
-
Size
8KB
-
MD5
f5473f840f9de710e3cb3e4bbfd9fd75
-
SHA1
2d6fa618b115bf42c272e2141c5d99d1268f86ed
-
SHA256
25933cc092b32616cb6b995a71b4b12ae339037ea56e5b784e12a6eff4074cf4
-
SHA512
06e7ae1b1bbd0f7ec36b3f8c74084bb79e4d58d3fb26994cb332c63bb6f29d4efc9e78c0816132889dde997eca1a159c282f95febcd5d23e0132751e53d38dcc
-
SSDEEP
48:68Z3p8Igv0h2C3ax4EBbcTDO8TmoH44xX5hh5+KCPuWBTBv7xH:5yIp8C3ayEBbcTZTI4xX5hh5qu4Td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5473f840f9de710e3cb3e4bbfd9fd75_JaffaCakes118
Files
-
f5473f840f9de710e3cb3e4bbfd9fd75_JaffaCakes118.exe windows:4 windows x86 arch:x86
65cdcf7f38a0fd181c6cb07d32d8f71e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ