Static task
static1
Behavioral task
behavioral1
Sample
d37c899ae7d3e1586411c0765101f6ca_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d37c899ae7d3e1586411c0765101f6ca_JaffaCakes118
-
Size
83KB
-
MD5
d37c899ae7d3e1586411c0765101f6ca
-
SHA1
d949a21c9b9af623708c759da96c4d90be948204
-
SHA256
b8d62ad03cd5d4d125a66b588612afe00ba55effa6943a50d26a6a44ab47813f
-
SHA512
1ba1cbc1c4fb555d714f44f99f1f6d8b5bd6949c1aae8b4ebacd4d6a3787ddc54063ede53f1ae91b08c79b2eff999307ce5c4802c4dab80b93ff55c14ed5ab20
-
SSDEEP
1536:x+uej+bzBozCzSWMzQE8nPEBTLANd5VyYE8g53Mdwys3h9J01N5+DQ8O:xzBoz97UbEa5V5TgxMd6/J0/J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d37c899ae7d3e1586411c0765101f6ca_JaffaCakes118
Files
-
d37c899ae7d3e1586411c0765101f6ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b47937333997f9aa97647458626437c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPriorityClass
FindFirstFileA
Sleep
wininet
InternetSetCookieExA
FtpDeleteFileA
InternetSetOptionW
Sections
.text Size: 59KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE