Static task
static1
Behavioral task
behavioral1
Sample
de8701677630e2022761d11b1050ac29_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de8701677630e2022761d11b1050ac29_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de8701677630e2022761d11b1050ac29_JaffaCakes118
-
Size
97KB
-
MD5
de8701677630e2022761d11b1050ac29
-
SHA1
acf2ecfb2faec7e1140f76e8fde091757cc801da
-
SHA256
6c3e3eeed17d6df0efc32d8e268ec80cc011faa5419a0cb6a918b35e4bf9474a
-
SHA512
f4bebf88e77a9619c0a75a3761050ca0d65e7382b684af2278b1f500c95ac35f33010cfd71b28e456c2ccb94c09e93663b237fe04a8ad06df80976bbd963a664
-
SSDEEP
384:F4FLyDshLmqjlDlKxCAbtFvzWD0RYV+JSbj:oLyQh7Rc84RYs4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de8701677630e2022761d11b1050ac29_JaffaCakes118
Files
-
de8701677630e2022761d11b1050ac29_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE