Static task
static1
Behavioral task
behavioral1
Sample
048f83e8fc022d39b8f62ab5f0721d1d_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
048f83e8fc022d39b8f62ab5f0721d1d_JaffaCakes118
-
Size
65KB
-
MD5
048f83e8fc022d39b8f62ab5f0721d1d
-
SHA1
98e80d3181804724474b4d88fa0f5d7ab852442e
-
SHA256
4ff8bfa67a83f76d968b08499bed94cc53ed51b1c041615e8f7f194d4728640b
-
SHA512
6df4d84f8b8ae70ba1573fd3b67c471ef5abc96e00fdcaf739adb6b19eeb34596a6464ef166bb39f04c4e4ef1fb9cabf904627c1a58321d6ed334784632799ae
-
SSDEEP
1536:h8ipOzfvQa4Q2KffkpxuF7pElfqTBSHLsyi09P8wx:TpOzXQa4Q2KESBqfqTBSIyQwx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048f83e8fc022d39b8f62ab5f0721d1d_JaffaCakes118
Files
-
048f83e8fc022d39b8f62ab5f0721d1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE