Static task
static1
Behavioral task
behavioral1
Sample
d16c4836bdefa5c7e44a6bdcadb84735_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d16c4836bdefa5c7e44a6bdcadb84735_JaffaCakes118
-
Size
100KB
-
MD5
d16c4836bdefa5c7e44a6bdcadb84735
-
SHA1
d3422162f45b3ba5535a5cea54b5ee29c3b13915
-
SHA256
30a894484359768400867f92c43bfee18d026f6f0e8dd7ea2e06f79374f3ea13
-
SHA512
a403f63d5f3652ced46338bfc3140c22f6ecd5cc10aa07500c271bc932e7fa0078b121939b5df0a03a755bcc17b15a6cd772ce34ea9f56f0139e6d36c9a29688
-
SSDEEP
1536:PB+CkaajRWp73+1GU8vv4VhtrGCfqL8BbX6S5gJ+GNTvD6dk:WKr68wVyCf48BbX6TJ+E76dk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d16c4836bdefa5c7e44a6bdcadb84735_JaffaCakes118
Files
-
d16c4836bdefa5c7e44a6bdcadb84735_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE