Static task
static1
Behavioral task
behavioral1
Sample
b926a993f8f36eeee645bba8eca0b2e8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b926a993f8f36eeee645bba8eca0b2e8_JaffaCakes118
-
Size
83KB
-
MD5
b926a993f8f36eeee645bba8eca0b2e8
-
SHA1
dd4fea7569a5476eb671f10f2270fec195bab022
-
SHA256
7bb0a51cb3ad0ab2a1e14ba211ca8204135d903dd558a321811625ed76ed7d5b
-
SHA512
3c3463c03f20b10d35b1cd64444d70ad1196f3a2c717ff201abe5c7de98622e52f39bab591530a1ddb97e3b866700b575d9d07e739dde9b984c588e447a43556
-
SSDEEP
1536:RN4A9hFKmRoAth2pjiQ3GzgoHfCp8lVy9eEw+KiCB3EmH+MtCbbOec:/4A9GmPHIiQ3Gzn/Cp8jEwziKFHAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b926a993f8f36eeee645bba8eca0b2e8_JaffaCakes118
Files
-
b926a993f8f36eeee645bba8eca0b2e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b47937333997f9aa97647458626437c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPriorityClass
FindFirstFileA
Sleep
wininet
InternetSetCookieExA
FtpDeleteFileA
InternetSetOptionW
Sections
.text Size: 59KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE