Static task
static1
Behavioral task
behavioral1
Sample
828d1403188908c6690fb54c44422506_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
828d1403188908c6690fb54c44422506_JaffaCakes118
-
Size
494KB
-
MD5
828d1403188908c6690fb54c44422506
-
SHA1
270f911950a750b03249726a6347742089bd9bcd
-
SHA256
bfed64ff0bf464e548fda4a2ceb6bcf1b6a9d98b59aada426e12e77b5c854150
-
SHA512
0b500352e35af6968208456cf796bfc37a5459583752fac1d821c8202fdf6d61f7a7996e16161ecda7af4d6d1aa597d11c2baed040612ff8d5ed9cf0d5c3aa78
-
SSDEEP
6144:qICtWgCKtYlCKepTrPj/47maIowyzAtnlGszEmAIto95w1NVdUlDdv3ferQPuVEt:qI1g3tYQhdy0olz2GsCv9PtfecPubtJI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 828d1403188908c6690fb54c44422506_JaffaCakes118
Files
-
828d1403188908c6690fb54c44422506_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE