Static task
static1
Behavioral task
behavioral1
Sample
f18a29b4f63aa35101d7323d53069e22_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f18a29b4f63aa35101d7323d53069e22_JaffaCakes118
-
Size
100KB
-
MD5
f18a29b4f63aa35101d7323d53069e22
-
SHA1
7146d53a1dccdd03aad9402e82460f34bc512d05
-
SHA256
dc2af901abd4637b439b78ea722b2fced340276827d195f9fb4b32ffe43c99e2
-
SHA512
d3b487070e89604ac78f77a92604f3d9789db3169c8ae436f79f995d818ca215571fa13697942c08c0cd2812d9d16e8491f930fe1506400eb8e247b9c290a3d5
-
SSDEEP
1536:HzXymRT3j5ClVTV9IkWrAAgGX0SORNt628aKIfGVIT+G8/EpNFoOSHlT1dCd87:HzP34TV9ItOHRSQbGVI6G8spWR1d487
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f18a29b4f63aa35101d7323d53069e22_JaffaCakes118
Files
-
f18a29b4f63aa35101d7323d53069e22_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE