Static task
static1
Behavioral task
behavioral1
Sample
fc7d4a378e19407693ab79b2675a2a0e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc7d4a378e19407693ab79b2675a2a0e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc7d4a378e19407693ab79b2675a2a0e_JaffaCakes118
-
Size
12KB
-
MD5
fc7d4a378e19407693ab79b2675a2a0e
-
SHA1
6f3c2013af484ce5e22702f03fd9de5280310715
-
SHA256
475a026130673ef69cb853c15443a0ab80408971d82f18ce9a2be6aa8e84d7ff
-
SHA512
bd3ff67eaaa9cb72b52e362aed78e937bafe4828ded2bd41ea162f5f30ef406b79e21cd76732b6735e49e58a3ad597cf0681e4f1af743c5fccd2be4e7dc1d610
-
SSDEEP
48:iQJQV3vL/fFLvJZW2g51p6GGBcP4dDyXjoyNBU:PQBvfZ/gPp6GG84Z1yN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc7d4a378e19407693ab79b2675a2a0e_JaffaCakes118
Files
-
fc7d4a378e19407693ab79b2675a2a0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
a04ea65234c577dfe8d5afd8d86ec0b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
GetProcAddress
LoadLibraryA
CreateThread
user32
TranslateMessage
TranslateAcceleratorA
GetMessageA
DispatchMessageA
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ