Static task
static1
Behavioral task
behavioral1
Sample
f97f18bd4a93d5ff8db005ef002aff81_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f97f18bd4a93d5ff8db005ef002aff81_JaffaCakes118
-
Size
97KB
-
MD5
f97f18bd4a93d5ff8db005ef002aff81
-
SHA1
65449ab26aaeecb2c57d51c1b40915bf0af9e1f3
-
SHA256
dd1aea9f5ab7c1a6538ae3099c414d42efee76e556740a2208db6bc6bcb2ab0e
-
SHA512
034eb3ada25d0f420d0ac8e792fdc27f59edc418cefb531e45ebe46ba59f8c11faba02db3846d03093c39c7907a97f7da4fc1af69f7ebeb9cb2ecbc4f6ba0205
-
SSDEEP
1536:7qI2JmQFS4AiesmC3/4O2iSVRF1b4YoeGM4AdSgEETfu+xeXCc425ktBdwP6n0:7qBpdP3JS7F1MYoQdnMXCcUBqW0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f97f18bd4a93d5ff8db005ef002aff81_JaffaCakes118
Files
-
f97f18bd4a93d5ff8db005ef002aff81_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE