Static task
static1
Behavioral task
behavioral1
Sample
fb5641fcceeb05c6638af84ccb78fb18_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb5641fcceeb05c6638af84ccb78fb18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb5641fcceeb05c6638af84ccb78fb18_JaffaCakes118
-
Size
42KB
-
MD5
fb5641fcceeb05c6638af84ccb78fb18
-
SHA1
a3381d9194a0e476cbd32c8850baf7d68c0ef4df
-
SHA256
7c925eabfed7349d7c3db09ffbdd8bd718619519e3a90aa79f7a954d11cd4b77
-
SHA512
cc60c51e4796110d06855a4320ce767480c7df547399f687bb8e4b390f77b0361e8d549906da51a500192632c79079840358ef10b38fe06738577f81004ba222
-
SSDEEP
384:opXdLooCbG+0A5ZFO/erZfQrOEioyX3UQ:oHL79jA57O/q1aro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb5641fcceeb05c6638af84ccb78fb18_JaffaCakes118
Files
-
fb5641fcceeb05c6638af84ccb78fb18_JaffaCakes118.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ