Static task
static1
Behavioral task
behavioral1
Sample
644d35cf3aebb780e5b3ca55629b4aa4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
644d35cf3aebb780e5b3ca55629b4aa4_JaffaCakes118
-
Size
127KB
-
MD5
644d35cf3aebb780e5b3ca55629b4aa4
-
SHA1
944e5dd21c6d58c1f6258fbadf5dc7cd5f2b7ea7
-
SHA256
1bdd6534a33e227125a5ab4c921d1c3110576dd0d90e52acd7836eac81c28e49
-
SHA512
c46f4d9f45188f5d8b5edff79dbbf8d812c56e8f155c69776342f016874e36e292c0b24d6e7dd42c2e467ca6336dc19e8149c986c31c909964280fff0b7337d3
-
SSDEEP
3072:BFOqkhROpS+EB3sJVbVgZo7l9uUv3QgNLHVQs:zPkQSB8BgZoBdZ1Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 644d35cf3aebb780e5b3ca55629b4aa4_JaffaCakes118
Files
-
644d35cf3aebb780e5b3ca55629b4aa4_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE