Static task
static1
Behavioral task
behavioral1
Sample
0fe6b734bd446be556a2b6ef4c64acd3_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0fe6b734bd446be556a2b6ef4c64acd3_JaffaCakes118
-
Size
100KB
-
MD5
0fe6b734bd446be556a2b6ef4c64acd3
-
SHA1
452743f6aa441a7dd8800aaf1f2d1469c6ea2822
-
SHA256
70dc5d6a9029b69701d19ea1dc758275de98b64af857311957da9d2926173857
-
SHA512
b737f8cbc70213edd3f1160678beb981053d164892d95850e5e3abf8a32d9350f55abfaaf20236e65ccdbd84ceeec3583599f49a1fb13e5995add0ac60736415
-
SSDEEP
1536:/GzacN849KzlnMbk9GHAu1yHcgIOb6Nl1fNucDkJhGa2D7+4raPy:/GzpN849KzlnRU16RbS7qJj2DCaMy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe6b734bd446be556a2b6ef4c64acd3_JaffaCakes118
Files
-
0fe6b734bd446be556a2b6ef4c64acd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE