Static task
static1
Behavioral task
behavioral1
Sample
a6bc1d322671bd3b8837b52832bcc43c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6bc1d322671bd3b8837b52832bcc43c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6bc1d322671bd3b8837b52832bcc43c_JaffaCakes118
-
Size
6KB
-
MD5
a6bc1d322671bd3b8837b52832bcc43c
-
SHA1
0a1cd428e7f28da2626ed1e916d71661458df8db
-
SHA256
3f18b8c2f84c4bfd86e1733094a23fc997b3a3aa0c0c93e3d58eb0e2d6af193a
-
SHA512
59bd378a965cde77ea424577760212ce5c2f0363cb5cfdb953cf49307fe80fd55fc41bf5c895cd44ecaf0ac90012ef6c1b3704aadaeb15843579955d25490d2b
-
SSDEEP
12:eH1GSG465M6akP1AZX1R9/EcGvqRBb70iCPAYKLORIBORLch:eH1GSAM63EX1R9/EbvqRdQfPVKPBJh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6bc1d322671bd3b8837b52832bcc43c_JaffaCakes118
Files
-
a6bc1d322671bd3b8837b52832bcc43c_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE