Static task
static1
Behavioral task
behavioral1
Sample
ff14ce625c563a159e569dd362626169_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff14ce625c563a159e569dd362626169_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff14ce625c563a159e569dd362626169_JaffaCakes118
-
Size
44KB
-
MD5
ff14ce625c563a159e569dd362626169
-
SHA1
5d11a70945afeddd237e2c78d1ddcfd95e4bf25e
-
SHA256
dd75de8e3a7c9626703523d20c3c3739c53bfa2e3842e27fa42281460f6690d0
-
SHA512
93cd4f01dfac9392f34dc0178fe67f4c0601520826c4607c3254f362ca7cd70e46a59730e69fda228bc127cdc157b116646aac50748acb55cfec92e3924b46d5
-
SSDEEP
768:2irxuJQhlm0GhU3lDTCCrIYPBUg1vVVQl58pFC:2irNz1TCIIUCKvVVQAp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff14ce625c563a159e569dd362626169_JaffaCakes118
Files
-
ff14ce625c563a159e569dd362626169_JaffaCakes118.exe windows:4 windows x86 arch:x86
461f1800d5af6fd55f7b6a11b0a44fb9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextA
GetFocus
kernel32
ExitThread
GetComputerNameA
comctl32
ImageList_LoadImageA
ImageList_Copy
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ