Static task
static1
Behavioral task
behavioral1
Sample
276af85b01a98da7b9f04c05f6efa941_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
276af85b01a98da7b9f04c05f6efa941_JaffaCakes118
-
Size
95KB
-
MD5
276af85b01a98da7b9f04c05f6efa941
-
SHA1
0b46cc8775026e03ecff14b247f850d9626ec1a2
-
SHA256
837783bfb7e2be8c171d77385fb2c1a24689c72a49b087956ef15a8c10e24c67
-
SHA512
fdb6aa3486d0b72d1a09369bd2c371c6cc0803718811890963b58bc573e00cf24ba2eb8c0c28ef113c9308ddb2f330effa78a912701282182b0737ea6bc6fcdb
-
SSDEEP
1536:96RBEvNRej68HWyS71T42vTKD+RcMJBykGJ/F1/bdEIQEzUxAmibfo:9lRejNpD+qaykGJLTpQEb9fo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 276af85b01a98da7b9f04c05f6efa941_JaffaCakes118
Files
-
276af85b01a98da7b9f04c05f6efa941_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa225e54b763276d6b0fd2dfe65f8a7a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadModule
GetProcAddress
user32
MessageBoxA
Sections
.text Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE