Static task
static1
Behavioral task
behavioral1
Sample
015de8f191fa1f7943f4643764e236c6_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
015de8f191fa1f7943f4643764e236c6_JaffaCakes118
-
Size
100KB
-
MD5
015de8f191fa1f7943f4643764e236c6
-
SHA1
2ebad95aba98ff52f57b0cd23d9f50de476a7edc
-
SHA256
ae4edf21d8990b46c573b773764a48f3c84aff10a70cdb4ce8fa4e72f69f92d3
-
SHA512
455b72e0d9539dad18f49534fc28688a66aa0267513b4d3fb98dc17fd2fe56d5d28b93c2b39d8973054885414d3494dbe64fbdea7425bf58f6f523bb35b506fe
-
SSDEEP
1536:kui8t4wVm3ZsxdmZY6G7DgXB8tAgzGVFXZUjz85k5beTBwpX/0ovvyatKyK:kuR4D3ZKQY/7E8tAS2puFeTBQcoCRy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 015de8f191fa1f7943f4643764e236c6_JaffaCakes118
Files
-
015de8f191fa1f7943f4643764e236c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE