Static task
static1
Behavioral task
behavioral1
Sample
f1788c80c2683c09fb9886d4e6173f2b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f1788c80c2683c09fb9886d4e6173f2b_JaffaCakes118
-
Size
119KB
-
MD5
f1788c80c2683c09fb9886d4e6173f2b
-
SHA1
ff283ee6674545b8edacddb13d3512c8f47a015b
-
SHA256
5b3286ea7821e9f5edfaea416f2f8eeae19eaf680517478ae73a1db2314100b9
-
SHA512
97e4bd23eb4cfdc02c5598a4064def4657461d0bf686673e6a76008272981b327e7f2bb4d2fcdac2f89ec64ebc2ab6772a6ca6f0d4e3d714b1f295b729eefb52
-
SSDEEP
3072:1niig7Jgt8EspeU2+5CJ2juXLdXfvubruced9sfTh3rg5o+p2rw5Y:1nir7Jgt8EspzR62jyXfviuct7NG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1788c80c2683c09fb9886d4e6173f2b_JaffaCakes118
Files
-
f1788c80c2683c09fb9886d4e6173f2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE