Static task
static1
Behavioral task
behavioral1
Sample
949b99e44528c79cffeac3876a5619ac_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
949b99e44528c79cffeac3876a5619ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
949b99e44528c79cffeac3876a5619ac_JaffaCakes118
-
Size
196KB
-
MD5
949b99e44528c79cffeac3876a5619ac
-
SHA1
4d443e673a2991a7408292380a269bb900a25de4
-
SHA256
02867020fd08cff21e9922e1f8ad3e7c7cf9ed3863ce9482c3be95227a66f991
-
SHA512
45c59b4e6af696f2ce54aa7156e0c62045abb5dff9fc0a881c2da5b1bcf9d7f6709930e66f36fca0ed40b4b642d8e574aeea97386c6327d43ed0037a7b59141c
-
SSDEEP
3072:3758+pd2UrnPg0yDkai7MTawCI2lIUFv7Xf9F:W+pNn40yY7MmI2lPj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 949b99e44528c79cffeac3876a5619ac_JaffaCakes118
Files
-
949b99e44528c79cffeac3876a5619ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
e82dd51b077167be63c004bed23d0c1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
Sections
.text Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ