Static task
static1
Behavioral task
behavioral1
Sample
f696cbb161448710346fbf2016ca6255_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f696cbb161448710346fbf2016ca6255_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f696cbb161448710346fbf2016ca6255_JaffaCakes118
-
Size
28KB
-
MD5
f696cbb161448710346fbf2016ca6255
-
SHA1
4d9a4dd96c0d498f7ce535c9c92906695ae113d8
-
SHA256
2e01c2c0fbd3433ed7a6a167bea7db6b5fef46725bc9fa64c22827d0cc0c1ae2
-
SHA512
c8e071ade40e9fea802e26e1f0136fdf97ae405126232c1cb2fe6344c85cab1a49a81b5f7ccae75e9231f24a743014039bc4606d14b0744f225211cc54da1b3f
-
SSDEEP
384:oLH+l78dhxx8xwwflh1weVolCwpbl5pyJmF2xEwx+xXx6Sp:UH+l7orx8FLr68wxpHI+w8Bo0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f696cbb161448710346fbf2016ca6255_JaffaCakes118
Files
-
f696cbb161448710346fbf2016ca6255_JaffaCakes118.exe windows:4 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
.text Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ