Static task
static1
Behavioral task
behavioral1
Sample
9c149803d8ad41c3bc797707b1bc0f3f_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
9c149803d8ad41c3bc797707b1bc0f3f_JaffaCakes118.exe
-
Size
97KB
-
MD5
9c149803d8ad41c3bc797707b1bc0f3f
-
SHA1
460eb036e0526386468eedaf0de5632bba8890bf
-
SHA256
e90e3d8dda45c7b9e418c520847d562504a45bc5e444907c040e9dc10dae1060
-
SHA512
8282f48c91f17546b842898e8ba7fc91f2a808d6b713e76679494985e3edc8fa7402b0d2b56498dbe33a5271eba18a42f2f1fbf663d41855d48353a3836399df
-
SSDEEP
3072:/cl6BDXPNZso1U4mK3dBH6uFKWduYQYX:tJZso5m+H6VS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c149803d8ad41c3bc797707b1bc0f3f_JaffaCakes118.exe
Files
-
9c149803d8ad41c3bc797707b1bc0f3f_JaffaCakes118.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE