Static task
static1
Behavioral task
behavioral1
Sample
61143c9deb1650dc8c593972a8cb585a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61143c9deb1650dc8c593972a8cb585a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61143c9deb1650dc8c593972a8cb585a_JaffaCakes118
-
Size
499KB
-
MD5
61143c9deb1650dc8c593972a8cb585a
-
SHA1
8a12ef1f081a1d67e28f3ebde925572cf763b13d
-
SHA256
262812a19a06c1b78f88176c26e46f1dd8708a26d4313303c2ab8c7bc197646c
-
SHA512
d9de16ebb7fdc1724c42c4e8c8a4f4d5b2b6677c22d8022e16cb970be4ffdf593c3b4b72907ed1c537ab3bb9a2ee1d8d61a2ebec9895a72acc596f6e40b590ff
-
SSDEEP
12288:+mPxD/vieA3lcnVv6x3x0NouUwob2/YAGuyXGuMt2PRy16:n3ivcVyZxgoCAsyXGuMtIRr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61143c9deb1650dc8c593972a8cb585a_JaffaCakes118
Files
-
61143c9deb1650dc8c593972a8cb585a_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8fdb9058bbef1bf6b54424e4aaa60eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
Sleep
DeleteFileA
DeleteFileW
LoadLibraryA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ