Static task
static1
Behavioral task
behavioral1
Sample
b34a4a04c37602159a2fd3ab684e6bdd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b34a4a04c37602159a2fd3ab684e6bdd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b34a4a04c37602159a2fd3ab684e6bdd_JaffaCakes118
-
Size
97KB
-
MD5
b34a4a04c37602159a2fd3ab684e6bdd
-
SHA1
7f23932e5402ec4282c5871db8218688a447b3a7
-
SHA256
500d8c8d49dbdd24091862711e929c4d2a72d608b43a2605493f32eea3d54f57
-
SHA512
7d1b2ad915c5547e443906f6a8cb180e6f89b603df071e2933ee0b8028dfee5cd30918874495e3c5c89bf9fad51b67c84820731788a731423144d41ef4d256ac
-
SSDEEP
384:f45xAzbnWPZIMUlGNcXZMp5kyWD7Mn+Ewiz/wSkbMMgiJ8IOKEllcMJRITeR:bQUlScJ0akJzw8iqIOKUNJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b34a4a04c37602159a2fd3ab684e6bdd_JaffaCakes118
Files
-
b34a4a04c37602159a2fd3ab684e6bdd_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE