Static task
static1
Behavioral task
behavioral1
Sample
8d9355e49599b531eca5de3c2414322c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d9355e49599b531eca5de3c2414322c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d9355e49599b531eca5de3c2414322c_JaffaCakes118
-
Size
116KB
-
MD5
8d9355e49599b531eca5de3c2414322c
-
SHA1
c6e7040454e46521909243bc406737a5b867eae3
-
SHA256
4714d751b91b5b282cc01ca7719cf3c4a353ca59d3cd460d59938f3604760649
-
SHA512
1544c424ee8b6d326388bf43ddd8b4410559211a0a0f6d58a5d961ad020c3dd33c5b265bb9f3a1b79f960f569286c72c4cc0ddb69e5ffc4f960864c9db74977e
-
SSDEEP
768:znLx0qi7AaVl+4s5tWnk6fvUBSM6EZA/TsIyUfEB:/xti8elS5qHOXZA/wBU8B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d9355e49599b531eca5de3c2414322c_JaffaCakes118
Files
-
8d9355e49599b531eca5de3c2414322c_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE