Static task
static1
Behavioral task
behavioral1
Sample
684f9f479020ee73540afcda6ebf1ce7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
684f9f479020ee73540afcda6ebf1ce7_JaffaCakes118
-
Size
97KB
-
MD5
684f9f479020ee73540afcda6ebf1ce7
-
SHA1
5c9ad76a0f4d6a7c6513f2b501c7c538ae2f1c97
-
SHA256
5ec542ae075138303101c296860a5894759003e00576897e96d29f9adcc6c7bb
-
SHA512
15d923706da39494c2ae9f0e0b0f63ff0b93f8b3d5d47245ee49e1c6eb2f8b42c1ca72553958d5e28fe94866e1c20e0f1625491db820a42b7229a68e9c8fa9dd
-
SSDEEP
1536:h4GDYvjui9u6RyKzTKJhYbBnmpuX4qBXvWP4yeMU14FBYy8V31:ZD4RyITKsnmIX4qpKZeMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 684f9f479020ee73540afcda6ebf1ce7_JaffaCakes118
Files
-
684f9f479020ee73540afcda6ebf1ce7_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE