Static task
static1
Behavioral task
behavioral1
Sample
457e19bf74d4664b5ed773e1e643225d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
457e19bf74d4664b5ed773e1e643225d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
457e19bf74d4664b5ed773e1e643225d_JaffaCakes118
-
Size
16KB
-
MD5
457e19bf74d4664b5ed773e1e643225d
-
SHA1
43932c296fefdd5d2c620a03f3d8ef8224571670
-
SHA256
fb98f5ca5d963d8dca2a9bb2ee284a5a355b30cee6989285ece2effe9ab142fa
-
SHA512
88bc4e17959f7f1e5a1d99614dbab74bf0a3f6f65e18c51eb794099227bb1ac8c19e460866f47e127a4e40913e0052b33bb3c294c0b68cdf89e9298e6e0e0188
-
SSDEEP
48:601Y7XSO2HjoxD3yLp3rbA9Pqsr6e0XLKb6TCh2seP10iO0Bv7c:E7CToh3YA9PbriLq64x0ntdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 457e19bf74d4664b5ed773e1e643225d_JaffaCakes118
Files
-
457e19bf74d4664b5ed773e1e643225d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a29e41627ed10624b64fbb01fd8b76f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ