Static task
static1
Behavioral task
behavioral1
Sample
1ae95dd0b8d83e35ccea79567cd4ec71_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1ae95dd0b8d83e35ccea79567cd4ec71_JaffaCakes118
-
Size
123KB
-
MD5
1ae95dd0b8d83e35ccea79567cd4ec71
-
SHA1
0013844a3383d59cf110e6e14bd67385cfe5f275
-
SHA256
54440577090a80daae9a78ce4426197fc99b9d5207c53367d225051c3ff89dc1
-
SHA512
3152afa8e78d4849fd732732b462f32d34a40849eda59c5d7234df3f27a161a816b8c6ee8124bcaab4d81011efb0142fb3061ed63d70022eae35accae7dfd199
-
SSDEEP
1536:LYetfkjW4QQIQVtN4bGl0kOlBjL5KRr7sWXIsZ9gRu61rF2o/X2SqikYF:cedkjSn6N+TIr7RXIiSLF2SX2WF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ae95dd0b8d83e35ccea79567cd4ec71_JaffaCakes118
Files
-
1ae95dd0b8d83e35ccea79567cd4ec71_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qaakqgp Size: 68KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE