Static task
static1
Behavioral task
behavioral1
Sample
274074fc7069f0c5b6bec27746a2bfec_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
274074fc7069f0c5b6bec27746a2bfec_JaffaCakes118
-
Size
578KB
-
MD5
274074fc7069f0c5b6bec27746a2bfec
-
SHA1
8a8bcdead77b6ab34337ebb19a90fa1d0fcc09a9
-
SHA256
d600e10663df5b5256ddcce989fe39b01e6002d5878d38e9cff4686f96b14631
-
SHA512
b4a5f41bc7fe72043e3dd2257dca34661201fd49ed5a484d6b77c3eb18627a3069bb01b15145e6352168ac135afee4ac90efea2bbdc8305eb110d21deb3e38d0
-
SSDEEP
12288:OynutOl9oOYvS/AYSgQ+plW/SPm7WA5xB6MWdeoUeDfiIqiyh:OQyOleS4YZploSPcx5xgMnoUeDfiVia
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 274074fc7069f0c5b6bec27746a2bfec_JaffaCakes118
Files
-
274074fc7069f0c5b6bec27746a2bfec_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 27KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 473KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE