Static task
static1
Behavioral task
behavioral1
Sample
ff5fa587f306d43cfd528ae4cd7a645c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff5fa587f306d43cfd528ae4cd7a645c_JaffaCakes118
-
Size
97KB
-
MD5
ff5fa587f306d43cfd528ae4cd7a645c
-
SHA1
0c8d691edc5f0a71cc4a04cb2a30b8e94a51eef1
-
SHA256
6e43485f6a95e15a73d12607d8d998e19cf368137798040218d8d46de19d7725
-
SHA512
799cde73fc122b5710f886cea20d1ce618562ae97cfac5aded7cc2663d441dc7302dd113b161a30b2f34599a843f3a858ff18353360a774bdf7ad20863842932
-
SSDEEP
1536:7ozT2kAx+pQbjkftb/8M1a1CwdqaXmrA+yfEX6Pm5peNkWLYAj:u2kAx+sjk12ZXvfZm5pe+WLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff5fa587f306d43cfd528ae4cd7a645c_JaffaCakes118
Files
-
ff5fa587f306d43cfd528ae4cd7a645c_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE