Static task
static1
Behavioral task
behavioral1
Sample
483195097f9e2a9c9693f2f047012195_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
483195097f9e2a9c9693f2f047012195_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
483195097f9e2a9c9693f2f047012195_JaffaCakes118
-
Size
3KB
-
MD5
483195097f9e2a9c9693f2f047012195
-
SHA1
5cbb3dfb12a9d6a687b3d59bbc04a688636628c8
-
SHA256
c0c48406b006d2fa64f59a4e7fd767954a9ea4ede8a5a1d23d24d85f398b5136
-
SHA512
da494cacddd8d298b79782ad2238fad53001a545276336f082da0195bf2dad9c8bd28290426fe35941d9e5884c6f845f6a27ae36a5600b2080ba3e1b30c0f0c5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 483195097f9e2a9c9693f2f047012195_JaffaCakes118
Files
-
483195097f9e2a9c9693f2f047012195_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad26cc634d7b2135c5a87d1d8ceb2a30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
GetTempPathA
Sleep
GetCurrentProcess
TerminateProcess
ExitProcess
user32
wsprintfA
shell32
ShellExecuteA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ