Static task
static1
Behavioral task
behavioral1
Sample
0f5f106319e9695f9352ed7ff17b4760_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f5f106319e9695f9352ed7ff17b4760_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f5f106319e9695f9352ed7ff17b4760_JaffaCakes118
-
Size
97KB
-
MD5
0f5f106319e9695f9352ed7ff17b4760
-
SHA1
bbd45d7587c8465464de2155065512deb473ae24
-
SHA256
dcd5410639d931ad8b6edc4dc692eba4cea9725c67f7937c9f6d578bdaec8674
-
SHA512
8c0be4f39d508b9aed2e7f5e20edc58f9bda7d75a32a1455d5c95563341b1e2deaae447c124dbead5ecd7b59f36925672198fbf833fedcdc4fdca1fa589eff35
-
SSDEEP
48:yS3mBEra0ftKPBANP5CxD9ZRSQaUKtUZMZtrDhg/ZBZEokJB0xCHt:zHa0F4skxZZRSQrKtnrDhg/ZLL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5f106319e9695f9352ed7ff17b4760_JaffaCakes118
Files
-
0f5f106319e9695f9352ed7ff17b4760_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE