Static task
static1
Behavioral task
behavioral1
Sample
67ef44569c3f4a9097ff40cba9d8c727_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67ef44569c3f4a9097ff40cba9d8c727_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67ef44569c3f4a9097ff40cba9d8c727_JaffaCakes118
-
Size
97KB
-
MD5
67ef44569c3f4a9097ff40cba9d8c727
-
SHA1
4fe845c6b824b76b7a7d35d44be7017289b43812
-
SHA256
59dcb7e575be6b47b8e891d72d0dfb8960c395dd761ab4db8497ecd7f3b70862
-
SHA512
f11f27729d7e71d0beb4b827d1bf5f56148e1ada400a11417b3ac085c55751619ed8991ce36c89dd0515b825d994d4051bade0040fc87ff1e1d7135853603acb
-
SSDEEP
768:8UkKUJed78FfGPCf9z2BAW/aD+V5QfdbWJEE3xuWqGRebp:8reaOCf92/aD+ABWJEUNqiyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67ef44569c3f4a9097ff40cba9d8c727_JaffaCakes118
Files
-
67ef44569c3f4a9097ff40cba9d8c727_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE