Static task
static1
Behavioral task
behavioral1
Sample
1b20a80c01e1a21fcba4c108a31e8180_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b20a80c01e1a21fcba4c108a31e8180_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b20a80c01e1a21fcba4c108a31e8180_JaffaCakes118
-
Size
97KB
-
MD5
1b20a80c01e1a21fcba4c108a31e8180
-
SHA1
3f5fccdda498755147869093b72212d610f738fc
-
SHA256
5876fb7b0f963825c5ba3e22b9b8fe449464490e286db06aeeb01191ef9c4162
-
SHA512
2cac3f3fe36f83d7aa99db404fef8bfe63a091c3ed3f11933e286cc606363ddaa765c8400ee9cfd5705d60a97f4769ec9aae8bebb68b0d2b3b001dd6f459ee7e
-
SSDEEP
768:TobvyaGyl9TTZgTr6RJuD9DuA9hHl6b23Cw:0bvygmTr3DPHYpw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b20a80c01e1a21fcba4c108a31e8180_JaffaCakes118
Files
-
1b20a80c01e1a21fcba4c108a31e8180_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE