Static task
static1
Behavioral task
behavioral1
Sample
8b5f5993a6367e039c0e9ecddd79785d_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8b5f5993a6367e039c0e9ecddd79785d_JaffaCakes118
-
Size
100KB
-
MD5
8b5f5993a6367e039c0e9ecddd79785d
-
SHA1
d1fcbdd77df084b9b09653039bb9ffef128fec10
-
SHA256
0ce3b0b846570b00a6dee99fedfbcf506b7974c3141606e4bb42d90061a7726c
-
SHA512
90f6e0d73e825ae97de9820a87b3532ccaa17bfd8c4fd993fb8c946abda9560a0e4e68c9df40b8d2fef914b79b5ddc0d8d429c4b181b234b691e7c05d6f0d696
-
SSDEEP
3072:cjkhEkLRq/K029ZnYiVaQWj14C0cIpW+sLacpI2/Hi:cYVOMvaQ01qzW0VUH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b5f5993a6367e039c0e9ecddd79785d_JaffaCakes118
Files
-
8b5f5993a6367e039c0e9ecddd79785d_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE