Static task
static1
Behavioral task
behavioral1
Sample
f9f6e40964ecd4b752efde83fde09f33_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
f9f6e40964ecd4b752efde83fde09f33_JaffaCakes118
-
Size
100KB
-
MD5
f9f6e40964ecd4b752efde83fde09f33
-
SHA1
38430bb585cb31a9a96d71a5f270ed57d10a4077
-
SHA256
6d814c43efc38b29ad0572d4376325215e7a557fdb798d980993f6156130d213
-
SHA512
879d53dfc4078ab900161cf0e2c825bf63bec4bd6dd3bec7738c8addd135cdb2801e10331b902d7bb06eee0f5a8cd5ab9eca7cc1ddcdc4d9fc0e6a4f1d36ba59
-
SSDEEP
1536:iN8TIalCntNWFLxe6vja6TE1xPUGEhNv18UgCFn1ictYj/tZuVrbnW/4Vu8QSNas:ua7Utc38/PUGEh/8AYcM/tCrSb8yuBFn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9f6e40964ecd4b752efde83fde09f33_JaffaCakes118
Files
-
f9f6e40964ecd4b752efde83fde09f33_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE