Static task
static1
Behavioral task
behavioral1
Sample
f0661ac0b3eee6ec9279ecdc3bba700d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0661ac0b3eee6ec9279ecdc3bba700d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0661ac0b3eee6ec9279ecdc3bba700d_JaffaCakes118
-
Size
97KB
-
MD5
f0661ac0b3eee6ec9279ecdc3bba700d
-
SHA1
49850fa45d54682670d2f833745e97db035b356a
-
SHA256
0454aa90ef94627c37009e7acc3ebe9da62ae59df18217c4ec4dfbfd9b79cbd6
-
SHA512
7ea3dfb8e4f5563884db5e3a81739a7b39662139815e29413d82a4167fdec80a739e961f5e1052211759ef8d5396b382020dd5c21684bf4c758f007ba39a9887
-
SSDEEP
384:u4l9zfwhgH+HIpGQdL/cIloXp64r8+E/XY2dJ:7dogQIpGmQIm6UEY2d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0661ac0b3eee6ec9279ecdc3bba700d_JaffaCakes118
Files
-
f0661ac0b3eee6ec9279ecdc3bba700d_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE