Static task
static1
Behavioral task
behavioral1
Sample
dc00dd2c6d0b618412c0426151764733_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc00dd2c6d0b618412c0426151764733_JaffaCakes118
-
Size
97KB
-
MD5
dc00dd2c6d0b618412c0426151764733
-
SHA1
ab6d8387bda105f83deef7138754d0a8524a7881
-
SHA256
ac16df719bf1d59b34a8590a4b2cf03e96ab74f10d604df26f4171f17d20b5c6
-
SHA512
a359dc74b838b83e88ef0978a86430c30d09191416d1452df34c4ff7f7c785dcaee4f5a5717848405272a5c0bc5d3b00b0f19afaede8e8aef30b01219ad1570b
-
SSDEEP
1536:8G+zrBDFF234j1joghCkvid9bOUZzsR/H9X3nepEZY8v3sd+R1uCqmZiEtWJio0q:f+fNOSEghBKJoH9nBK8v8zm0irq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc00dd2c6d0b618412c0426151764733_JaffaCakes118
Files
-
dc00dd2c6d0b618412c0426151764733_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE