Static task
static1
Behavioral task
behavioral1
Sample
ed7f3fe2e4a339d2dab107d5ddce043a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ed7f3fe2e4a339d2dab107d5ddce043a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed7f3fe2e4a339d2dab107d5ddce043a_JaffaCakes118
-
Size
19KB
-
MD5
ed7f3fe2e4a339d2dab107d5ddce043a
-
SHA1
03d12213cb7146d78e4b17267fd651d7bc882a92
-
SHA256
673e97c0511c2d4d0c1a303e5412a031fbe4d2963ee33edfe1d32ee42344a89a
-
SHA512
d70ef13fc64f5f1e99a1d5cd7241656fd3caf4ea3643dbc62fc4048a460ad0b1bd73e3925126d4bc2e662d692d075e0dddfcaa0e34a998591ab6b8d4b19de533
-
SSDEEP
384:ZP8kfarFJkJjZJudyKs6IszQVN4avZhwRgwLH6vf1eCrg4:hf+L4l0dHzQtZhwRgQC9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed7f3fe2e4a339d2dab107d5ddce043a_JaffaCakes118
Files
-
ed7f3fe2e4a339d2dab107d5ddce043a_JaffaCakes118.exe windows:5 windows x86 arch:x86
09945413403bff8a69440ed99a8be325
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
LoadLibraryW
Sleep
SleepEx
Sections
.text Size: 512B - Virtual size: 51B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE