Static task
static1
Behavioral task
behavioral1
Sample
8cb6fe92d6c05afb98d2e3bd228432b4_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8cb6fe92d6c05afb98d2e3bd228432b4_JaffaCakes118
-
Size
123KB
-
MD5
8cb6fe92d6c05afb98d2e3bd228432b4
-
SHA1
ce7654dc5fad057039d56ccaec374d88eb51b4ad
-
SHA256
80f8a7ccf741f7863f46725dbe3b66889547943284eaaf3fbd93285cc99c2a99
-
SHA512
b41aa67e13592682b5b466a0bc3ee29b45a601490c2641322dd652929114854bec038e9538d7d3fcaae9e94ec8db1e3fcba83df8e4e6eb4a09065a6141e52418
-
SSDEEP
3072:UZyUQ1/BOt3IIw5dJ72+JYGpIa1M3WvFnLs:UPU/EFIIwJ6+75M3OF4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb6fe92d6c05afb98d2e3bd228432b4_JaffaCakes118
Files
-
8cb6fe92d6c05afb98d2e3bd228432b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lztieup Size: 68KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE