Static task
static1
Behavioral task
behavioral1
Sample
02d9649f712e5a418752d27f09fac75f_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
02d9649f712e5a418752d27f09fac75f_JaffaCakes118
-
Size
26KB
-
MD5
02d9649f712e5a418752d27f09fac75f
-
SHA1
48ea321e2114493d7bb984db536fbb27ac349249
-
SHA256
db43d057f8207dc220b0cb4f34cd3357bf78fc64af73675fbdd10802d0b2756c
-
SHA512
ce0117bb24c60ea14b9b4a974fc9976161ea35d17bc2b4ab834dd2416c523bfdf6d66e589937b8ce9a4414e154eaf553b1d5e7dd5be5fbb0bb059665dcf179cf
-
SSDEEP
768:0Uhic6GNRQQNCXIiOLmDtSMLUbDh66Gstl:05c6GNa8C4v6OVLDl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d9649f712e5a418752d27f09fac75f_JaffaCakes118
Files
-
02d9649f712e5a418752d27f09fac75f_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb01a0fc3b776b726f021c130629577a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
user32
MessageBoxA
Sections
$� Size: - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE