Static task
static1
Behavioral task
behavioral1
Sample
3eaade580c8fce776b11a14be5cc32cf_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3eaade580c8fce776b11a14be5cc32cf_JaffaCakes118
-
Size
97KB
-
MD5
3eaade580c8fce776b11a14be5cc32cf
-
SHA1
22c50d1461a0cdef1223d2f3abc722ea17a87b73
-
SHA256
944171863b15ceadeb83771252a131e220ee8cfc32c48dd9f1209317fc25ee2b
-
SHA512
17b1424d12fbb68fa56edcec3106b6f0b7f707f628e6b1349dffc63b378f48edb6f2b5835bbb5fb7695d8000e5a04a2a89ede4e7ed61dea048c0b8503c8787c0
-
SSDEEP
1536:BBlf6XMojlXRaHad0sb8y6w4YVgoZpHErpK/pqUcJs3SkuxYEZvw6Qe:/lyM4VUadUpMWK/ArxYUl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eaade580c8fce776b11a14be5cc32cf_JaffaCakes118
Files
-
3eaade580c8fce776b11a14be5cc32cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE