Static task
static1
Behavioral task
behavioral1
Sample
048d4aa11e4f0675311ae36e79fd233c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
048d4aa11e4f0675311ae36e79fd233c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
048d4aa11e4f0675311ae36e79fd233c_JaffaCakes118
-
Size
44KB
-
MD5
048d4aa11e4f0675311ae36e79fd233c
-
SHA1
6d89771599a1c726b502a4750dca616732f2d55e
-
SHA256
aef2c94e1cd1987d86feb94f79e1b6067f60cc9ccdcd843a0fbcc831ef9a5778
-
SHA512
ce62f945672de982c458ca570093eac736e93aad0e0783a024d5d9bd05950679bbe7edd332e1e409bab48ebca681867aa2a63dfcfbbe5f1b2b01a997c43480bd
-
SSDEEP
192:1UQcNhCefrV9zFCTr312vkWl92NGossJ608w:t8HfrV9aZ3i2MosK6dw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048d4aa11e4f0675311ae36e79fd233c_JaffaCakes118
Files
-
048d4aa11e4f0675311ae36e79fd233c_JaffaCakes118.exe windows:4 windows x86 arch:x86
11230e9744c56754480a43b992118932
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetWindowsDirectoryA
GetCommandLineA
GetVersionExA
GetLocalTime
ExitProcess
Sleep
CopyFileA
GetLastError
LocalAlloc
InterlockedExchange
RaiseException
FreeLibrary
user32
wsprintfA
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_itoa
fopen
fscanf
fclose
strchr
_stricmp
rpcrt4
UuidCreateSequential
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ