Static task
static1
Behavioral task
behavioral1
Sample
fc60595d6c1174e2f4e0dace319acefb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc60595d6c1174e2f4e0dace319acefb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc60595d6c1174e2f4e0dace319acefb_JaffaCakes118
-
Size
16KB
-
MD5
fc60595d6c1174e2f4e0dace319acefb
-
SHA1
43a86a72196396ec7db20daed25f1c896663425e
-
SHA256
79f1c431934bdc25a93ddfc1625df83d0c0cfb3acd201fba06e77bb3143becc9
-
SHA512
dc18bd5e38c950eceb1934950f96c1f2e3bcdd79a67ce004c3070fadcaddf4fd674fcc20514cd6b62c660d0c0f7ee3728a2c38bd7a6539f9f973d549c86192b5
-
SSDEEP
48:6FsZ/kABKheTJ4YbRMjts0f9u+oOUtqbbISX48UG/XDLmJavamoz4IFBq7:a8/+E146qZsz+usB/TG63oz4QQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc60595d6c1174e2f4e0dace319acefb_JaffaCakes118
Files
-
fc60595d6c1174e2f4e0dace319acefb_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ