Static task
static1
Behavioral task
behavioral1
Sample
db8e9501403d9cb085cb910d49507555_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db8e9501403d9cb085cb910d49507555_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db8e9501403d9cb085cb910d49507555_JaffaCakes118
-
Size
97KB
-
MD5
db8e9501403d9cb085cb910d49507555
-
SHA1
38e621991e70184ba988b35617065bced2260b6d
-
SHA256
441b3af290cde332a3c2f0c181b0048e0c3aa94e24cc403963749d635d4e8fc8
-
SHA512
e5e3a390664cd847e9c800e88c7f4e7c578b08bee714e8cea0ac9db3362ed58849afad98312c46fdb2ee5a1ac4de90cf1cb2ccb706778073dc31a1ee10c14dbf
-
SSDEEP
768:zieUYAaUvUGa5ZFz7ZC1UPB8Lv+lG3sVFrp:OeUf25XOq8jqGcd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db8e9501403d9cb085cb910d49507555_JaffaCakes118
Files
-
db8e9501403d9cb085cb910d49507555_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE