Static task
static1
Behavioral task
behavioral1
Sample
ab97868806ab376f3dd18fb08635f796_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab97868806ab376f3dd18fb08635f796_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab97868806ab376f3dd18fb08635f796_JaffaCakes118
-
Size
97KB
-
MD5
ab97868806ab376f3dd18fb08635f796
-
SHA1
7c91c124f26d4631ca4b4015c864825d06bf79ff
-
SHA256
419ae20c0a570313e856dc0c6141881013f6f11c3adde9e15688e03a063fc1fc
-
SHA512
65055c1a1bf8eee6258fc70ec14c81b515e8f283c4a8c06bd9eebe3493d7b2157d47eacc0c39d5a7d2089e4ce6a0f92dc917e16574d82cfb878aacebda1182aa
-
SSDEEP
384:64gAOU/CFopups+T0ims9xzVH4e/V4qL57C/Y9H5Wd:aAV/CFRS+T0ds9xzVYwZ9V9Zw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab97868806ab376f3dd18fb08635f796_JaffaCakes118
Files
-
ab97868806ab376f3dd18fb08635f796_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE