Static task
static1
Behavioral task
behavioral1
Sample
d46896749cd183fb2c323472664d2d31_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d46896749cd183fb2c323472664d2d31_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d46896749cd183fb2c323472664d2d31_JaffaCakes118
-
Size
97KB
-
MD5
d46896749cd183fb2c323472664d2d31
-
SHA1
0143be4d5952ac11b4dae734c447069ce54bf5bc
-
SHA256
7bc8777671893a7270484e1f74d4e84dae3a133891632452c27d20c7b9b4f0d3
-
SHA512
e5bfd644a6347b3d973c4d808bc1e2b8920ac5f7566bde32855bd286753aafb516793822ccd94d7a89b12f45959f67de54539b97ec0b9f16a599f46c4a461740
-
SSDEEP
768:2jtH8kgwYizyyNx4UjBMj77Th+dVsTYu7CRu:2V8kgwFzHb4Uyj75+jsTY/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d46896749cd183fb2c323472664d2d31_JaffaCakes118
Files
-
d46896749cd183fb2c323472664d2d31_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE