Static task
static1
Behavioral task
behavioral1
Sample
0380dc3f32c82275a62f8fa0b0838980_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0380dc3f32c82275a62f8fa0b0838980_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0380dc3f32c82275a62f8fa0b0838980_JaffaCakes118
-
Size
7KB
-
MD5
0380dc3f32c82275a62f8fa0b0838980
-
SHA1
26814c5af1237862737f81ff61866bb51ed8a9ec
-
SHA256
e91f7aadfc30b1798dce83ab0301b0429ec2c48ca0625a08e88c2c455b72dc9f
-
SHA512
6699de402e40cfbb436c5173f8af4465118b47bb432028e73edf1f0543697ad40511b8d7a88ffb1e1562f75d653c2735164c097ffbd553c237aaaddba7e73c25
-
SSDEEP
96:K/EnxIdyxc7NEfhQM4xAQRUOSEWhum6d:KcOQKKZQR/SEW96d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0380dc3f32c82275a62f8fa0b0838980_JaffaCakes118
Files
-
0380dc3f32c82275a62f8fa0b0838980_JaffaCakes118.exe windows:4 windows x86 arch:x86
65cdcf7f38a0fd181c6cb07d32d8f71e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ