Static task
static1
Behavioral task
behavioral1
Sample
f63f8f3dbbbf7aee604ccbe7b37e31b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f63f8f3dbbbf7aee604ccbe7b37e31b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f63f8f3dbbbf7aee604ccbe7b37e31b5_JaffaCakes118
-
Size
97KB
-
MD5
f63f8f3dbbbf7aee604ccbe7b37e31b5
-
SHA1
730db185611f53bfcb0eb0a28679c2cc8822ce80
-
SHA256
dc528be3934307021077a04bfcd68ab3f480d9e2cbf1af1197f947afc21275d4
-
SHA512
9d4254579ed01700b52d01e83367e8a7f3ddd707aa3cae1837e91317ea977bb37009abe24a617b4b87b7e1d575b4a5dc8dc616c48bb331407c250e4adca96f11
-
SSDEEP
384:64iowWzLr/fvS2blwRUEgK0dztGMUANfq5jMXVWFDotrCGN9jUOaV:oow4Lr/X3S6Etazt3fsMXcetGGDj6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f63f8f3dbbbf7aee604ccbe7b37e31b5_JaffaCakes118
Files
-
f63f8f3dbbbf7aee604ccbe7b37e31b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE