Static task
static1
Behavioral task
behavioral1
Sample
eb1997e3f279841265c4c9ddc3d3685a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb1997e3f279841265c4c9ddc3d3685a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb1997e3f279841265c4c9ddc3d3685a_JaffaCakes118
-
Size
43KB
-
MD5
eb1997e3f279841265c4c9ddc3d3685a
-
SHA1
43bed7531c70d3ed6d86e335e988f9df0bc527a8
-
SHA256
d6354d362da8951b525631bbc860961ddf65823cb73fe77a2ff25b9fc32a1b78
-
SHA512
d8f271642df0a5220dac68a2ce22354481d1501798200161d9f37495436be855e39c999169da1576742d04e819bdd04ee20f7bd4c5c69d5ea87e37fb803bb54e
-
SSDEEP
768:qjjAcEP4dWML7emH4kwbC9SeVittYbjhqCq/yJ7VcNXimYpJ:qXkMHemB9gtYf4CVDcdifJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb1997e3f279841265c4c9ddc3d3685a_JaffaCakes118
Files
-
eb1997e3f279841265c4c9ddc3d3685a_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE