Static task
static1
Behavioral task
behavioral1
Sample
b320b9a75286c4c58391de2e57debd9b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b320b9a75286c4c58391de2e57debd9b_JaffaCakes118
-
Size
69KB
-
MD5
b320b9a75286c4c58391de2e57debd9b
-
SHA1
0f9bddf21dd4ca4934c0b96c5cd3230afe9cdd31
-
SHA256
fcee7fa5e71f0e33d271629600337ee3e7ab3b38aa9db2e19b867c27c181a72c
-
SHA512
df56ed5ab32b3ab55063c4098d04428b6e6cd2ade310c26ee7c2da5fe3560a918a58452e8c248d7182b5e5ed49522c06608d5382437623456f0def57a38136b3
-
SSDEEP
1536:fZuSrC561t4HyJr5OQSk25g5QGo/SbIzKQdA6H3R:dQvyJMQSB52QGo/SOHB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b320b9a75286c4c58391de2e57debd9b_JaffaCakes118
Files
-
b320b9a75286c4c58391de2e57debd9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8830768e26d5542e5a19dad95d6bbc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ExitProcess
user32
FindWindowA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE