Static task
static1
Behavioral task
behavioral1
Sample
e86c5d6360210e6e03317c9c7dc4efd1_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
e86c5d6360210e6e03317c9c7dc4efd1_JaffaCakes118.exe
-
Size
65KB
-
MD5
e86c5d6360210e6e03317c9c7dc4efd1
-
SHA1
427c0026e1388c1c5e38873d369297de40c5463f
-
SHA256
b01d86d9f2f55dcb17bf807752a747ab75674e970fc2922738d9289a406d3ee5
-
SHA512
b29fce9d58a879102516d9f2369c98000f0f7fea768ea05612f6402c2d3daceb71fd648cf36ccb8df67c77b99b7581b84200f25c2f21dfe7f5bc490eb334feb6
-
SSDEEP
1536:JzFx4EdCN6A7iNkLKxsxorh+v360A4inbLedlswqKO:4N6AEip360Zinbk5rO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e86c5d6360210e6e03317c9c7dc4efd1_JaffaCakes118.exe
Files
-
e86c5d6360210e6e03317c9c7dc4efd1_JaffaCakes118.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE