Static task
static1
Behavioral task
behavioral1
Sample
13b88002814ec770bb0c1ad9da0131a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13b88002814ec770bb0c1ad9da0131a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13b88002814ec770bb0c1ad9da0131a2_JaffaCakes118
-
Size
97KB
-
MD5
13b88002814ec770bb0c1ad9da0131a2
-
SHA1
a2dbcf524c762a488018d885fff4121692a143fb
-
SHA256
a1892c3d896875bd97de7b01438d8d1361e6ad4d766c0210d92f7311634db21d
-
SHA512
556ab92a161f60976e8c987ad1bfc121158d2a83c730517e7602527e751f2ec6d4932df7da2ac8fe4638f91f66f8f0ca5c01e8b71b2d2555007759f99a57a7b7
-
SSDEEP
192:zZC4SFuhB5qXJtLvsOz2aCl8otGvVsnNNCe:w4qvseotI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b88002814ec770bb0c1ad9da0131a2_JaffaCakes118
Files
-
13b88002814ec770bb0c1ad9da0131a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE