Static task
static1
Behavioral task
behavioral1
Sample
69e6870518738a3690f363d50c132093_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
69e6870518738a3690f363d50c132093_JaffaCakes118
-
Size
97KB
-
MD5
69e6870518738a3690f363d50c132093
-
SHA1
420ddd1978b5f697b4c801f4655a9012e8529847
-
SHA256
4e0fef9bac837b86d0ebeb52926f6c0f1424bf94b89b4e36c78cf53aba40c386
-
SHA512
15c89e46246ea825be8f2b651b7b3782df7505ec89860aebc4d432e21fd7680ccc58199aa5df98c232c55b73e39a293e2aeb9bbb09c43cab2465fc6637946f61
-
SSDEEP
1536:m0tgIxUUP3wN1f1UchCJdcmY5+AilBaVGCf+ZfOrHoaVxfi+GnBn+:mjePxEmco+GcBrH1TGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69e6870518738a3690f363d50c132093_JaffaCakes118
Files
-
69e6870518738a3690f363d50c132093_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE