Static task
static1
Behavioral task
behavioral1
Sample
170d6359a46fbd15a86c960b8605dd51_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
170d6359a46fbd15a86c960b8605dd51_JaffaCakes118
-
Size
97KB
-
MD5
170d6359a46fbd15a86c960b8605dd51
-
SHA1
388a6bb955279282f09770a9635fa71da1fd02b1
-
SHA256
77d1a9cb75e24eb124ddea873652b75e5415dd051b9c6abdeda62d2d51240b6f
-
SHA512
39700d6a74af1b87936c5f69716c55d2a461461c36dd27b8477907e90e438ba3af7e21373b70169cdbd7f3fc780fc3c54af5bf91c53a6b657a2d106b5f7d7522
-
SSDEEP
1536:CDpeNuA7fddhgAEOAlBV34Fl6AWNqyaMgGCDEOddP7:CDINuADddhvG34FlX4qyaMg9/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 170d6359a46fbd15a86c960b8605dd51_JaffaCakes118
Files
-
170d6359a46fbd15a86c960b8605dd51_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE