Static task
static1
Behavioral task
behavioral1
Sample
289c98e67cb73e7091662232fadf9fa6_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
289c98e67cb73e7091662232fadf9fa6_JaffaCakes118
-
Size
100KB
-
MD5
289c98e67cb73e7091662232fadf9fa6
-
SHA1
594e3072a260c098dbaa4fd84ac6ef6d6362d31f
-
SHA256
51cc23d4acdda1bea52ccec10aaa0c5e2f2b701c9c5d623976f556426b5d696f
-
SHA512
b34e762078aad9470fe87ff1cfcb543c56144323a0f2d8a71a7bea8eb1ecb42705dc99b6477c066cac0417926500071eed515469699a16582d3e097010ceabcf
-
SSDEEP
1536:uf+TJmj2ZfhaWuTG/dPEtJjpA98a2lJWbYKjcU3aNI7IuzvXSbsGB/TR:/TJbZfQWuTGe/pA9r2lJ2xcaPSbsGdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289c98e67cb73e7091662232fadf9fa6_JaffaCakes118
Files
-
289c98e67cb73e7091662232fadf9fa6_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE