Static task
static1
Behavioral task
behavioral1
Sample
fce1e8fa8b53573b504e3bae81166418_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fce1e8fa8b53573b504e3bae81166418_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fce1e8fa8b53573b504e3bae81166418_JaffaCakes118
-
Size
30KB
-
MD5
fce1e8fa8b53573b504e3bae81166418
-
SHA1
8ccb311d73dfd2948b44a2ef73cf42c5a8c8c20f
-
SHA256
65645125d051baade2f0ef3bd906ea220e149b51599f5891b1549f875872ff8f
-
SHA512
39977368b67d256897e657433155de4d0134d20506e732c539f88b193dee9fecd59ceab8a9cd6e48e99f5aa7bdfc0f3454f9fa7ab5f1df530751e38e155ed290
-
SSDEEP
96:aVGh9q+iPjfP3FUZaPGWEA4UZrOQk8jtI870zF1Lmt6qpT33vbzzMxQ:C4q3TP3qZGEAl8Qk8jtiZR2PT33zMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fce1e8fa8b53573b504e3bae81166418_JaffaCakes118
Files
-
fce1e8fa8b53573b504e3bae81166418_JaffaCakes118.exe windows:4 windows x86 arch:x86
b622ce9889cc6c0c5f000b296d2d67f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ