Static task
static1
Behavioral task
behavioral1
Sample
fa280483b1c0883b4aedf61066051aac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa280483b1c0883b4aedf61066051aac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa280483b1c0883b4aedf61066051aac_JaffaCakes118
-
Size
12KB
-
MD5
fa280483b1c0883b4aedf61066051aac
-
SHA1
8a5a93668e341562eee8155f999e548e88b64f59
-
SHA256
b142d45b3c9f5a7f3165949350eb31fcf9483dbfcd473d3e0e6ae887c7f21eca
-
SHA512
9aa6deb1d5555d8720cc81dccebd8e303ff9bbe9d7ff974fd5f0e888715d1d410015f714e8ec5e50f0eff40da6ac61b0165722410e411cb2efb8ddcae87c28ad
-
SSDEEP
48:6dHLaUt2JAmDOgfUGW0QMEiO58q7S9NF/w4Nz+y6tQ8VFCFXqiKg6ADj5BqR:waUoAYLUGhk37SHDDAPVIF6ikA35QR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa280483b1c0883b4aedf61066051aac_JaffaCakes118
Files
-
fa280483b1c0883b4aedf61066051aac_JaffaCakes118.exe windows:4 windows x86 arch:x86
c494458029910d0ed6df63da0b05bbd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ