Static task
static1
Behavioral task
behavioral1
Sample
1b50012186931f29514d06aa1644ae07_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1b50012186931f29514d06aa1644ae07_JaffaCakes118
-
Size
83KB
-
MD5
1b50012186931f29514d06aa1644ae07
-
SHA1
eb7e60eb589e7dd959bd4a33fca4b9efbce67ac7
-
SHA256
216a77e7de857529aa35e7d0b21cd4a96b0509892629d39578c12dc62690dd18
-
SHA512
2557f5d1d6e67c8f8586a388c836a8a131c4bdfa0a8edd5ab524a2e4348c4e4a356e4d89eb454b4a288d315219a4e14d1ff1421269140f6f2069accc8a406435
-
SSDEEP
1536:O5o4g/4adDe70benykqd6g5DkAOOnhEzOOA/cdwt7m:+o4g4v7PWd6g/LhsdA0dwBm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b50012186931f29514d06aa1644ae07_JaffaCakes118
Files
-
1b50012186931f29514d06aa1644ae07_JaffaCakes118.exe windows:4 windows x86 arch:x86
046168be49dbc6d094bfa7e6c5d298c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetSetCookieExA
FtpDeleteFileA
InternetSetOptionW
kernel32
GetPriorityClass
FindFirstFileA
Sleep
Sections
.text Size: 59KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE