Static task
static1
Behavioral task
behavioral1
Sample
0467a0d7a38144f1f071342f191a2570_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
0467a0d7a38144f1f071342f191a2570_JaffaCakes118
-
Size
97KB
-
MD5
0467a0d7a38144f1f071342f191a2570
-
SHA1
2f56be12cf842f541b7c1d6c3b9b7b51a88041cb
-
SHA256
50ad1823bf329aabc07c36211b3b4e4f23202cadcad4822963092c911831fbd7
-
SHA512
c146b2fb3c71295bf3d9f7272e515b3b33a67f091ac3ac268159e13ab9515b54444592672f0e4ea2f0318fc193373a8086b654f11ea4379f1ccfd2dc0a277da3
-
SSDEEP
1536:82eF82wZU3cgVv3yKRP6ocORk68tXcUOG6Jyex/xqcyjryrDQc/YOmch7Xs96QqT:82Q97J5yKRBRk6QuG6JIKHPLs9PSgv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0467a0d7a38144f1f071342f191a2570_JaffaCakes118
Files
-
0467a0d7a38144f1f071342f191a2570_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE