Static task
static1
Behavioral task
behavioral1
Sample
db889100a9c7eaa74c9bca1a36a7551c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db889100a9c7eaa74c9bca1a36a7551c_JaffaCakes118
-
Size
100KB
-
MD5
db889100a9c7eaa74c9bca1a36a7551c
-
SHA1
902ed4619836bfd9793e0f3f44f3f2433706c6c3
-
SHA256
2577b951128505c63097b94bdcb817fd9d60e292b0b26b857dd6231bbd4888c8
-
SHA512
374f2dda9e574e1244903931d3a6679347afb11fe508519bb6c4cc20e710a4528945be5addfe5746078c364fabf1b013ae01bb4e03708273a3ba4c894a309d4c
-
SSDEEP
1536:r1weXOhftjMdkVXu0RlvyAwuVIOrIe1A+XBBb5uqSAI2a8XME92AJw:pwSWMdihnaOdA+XBaSa5E95J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db889100a9c7eaa74c9bca1a36a7551c_JaffaCakes118
Files
-
db889100a9c7eaa74c9bca1a36a7551c_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE