Static task
static1
Behavioral task
behavioral1
Sample
f6e0c25936a6fe1f2dfd7c0c2a6cfb40_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
f6e0c25936a6fe1f2dfd7c0c2a6cfb40_JaffaCakes118
-
Size
97KB
-
MD5
f6e0c25936a6fe1f2dfd7c0c2a6cfb40
-
SHA1
3daef183f32d9c054721a319a7530c0980115f8c
-
SHA256
829549b3cc3c3798a7b34395b1914c1bfc095e960445e8a858068b95e3579fd8
-
SHA512
a4b5d01b6d2f122984b642d30ef540b6ae6134500af10d0e4f52c116b0fc8b94b38e0c994eba9abe17b85d650387b6e2ee9d5a944a9708cfd2ae423434550e14
-
SSDEEP
3072:nYP2Z7o3LiW9C2Tk3RjjgLjMel1KxSCXo1:nY8o7iWdTk3GjZf4Seo1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6e0c25936a6fe1f2dfd7c0c2a6cfb40_JaffaCakes118
Files
-
f6e0c25936a6fe1f2dfd7c0c2a6cfb40_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE