Static task
static1
Behavioral task
behavioral1
Sample
f220f653181919501697fa855f1b2194_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f220f653181919501697fa855f1b2194_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f220f653181919501697fa855f1b2194_JaffaCakes118
-
Size
97KB
-
MD5
f220f653181919501697fa855f1b2194
-
SHA1
5494d73f07a1407fc24c06c0bc7bfad1d024edd4
-
SHA256
e6bfef401052b80b9d648c4e4ec408dc7da57db1e620ba493532ff07b79aabed
-
SHA512
75fb9eadf53ae288d1fea842506df7adb9a40ae02380087d456cf7584dd27a94b4f4410ad57409ab7943f3b84076c1b2f522c0e165c16afc4468ee0cbf8cf0a6
-
SSDEEP
384:94W6elQUpsIpdIveH4qPAxEL53/xSF1kfyky3L9Utr:Nlts+HRPAq3ofkqkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f220f653181919501697fa855f1b2194_JaffaCakes118
Files
-
f220f653181919501697fa855f1b2194_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE