Static task
static1
Behavioral task
behavioral1
Sample
825877c6a16276235a0d8d51b7ad9cea_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
825877c6a16276235a0d8d51b7ad9cea_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
825877c6a16276235a0d8d51b7ad9cea_JaffaCakes118
-
Size
1.1MB
-
MD5
825877c6a16276235a0d8d51b7ad9cea
-
SHA1
3856344039ef3eb92c94236e4b7baf0e884c74bc
-
SHA256
aa962a2a4ca9413c0ca17ca788a98be15eda5537d528382d68a2387406ccbba0
-
SHA512
65fecea80cd1c8fd090c63f53117105c86c3643bd33eedb599d435bff8189184723aad47506c22b5adf2c1367de3e012cf54ff27c68cb4870270c418225b1212
-
SSDEEP
12:eH1GSG465M6akP1AZX1R9/EcGvqV0iCPAYKLORIBORLc:eH1GSAM63EX1R9/Ebvq6fPVKPBJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 825877c6a16276235a0d8d51b7ad9cea_JaffaCakes118
Files
-
825877c6a16276235a0d8d51b7ad9cea_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE