Static task
static1
Behavioral task
behavioral1
Sample
fab5ea831d8b8afed62cd9651dee75af_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
fab5ea831d8b8afed62cd9651dee75af_JaffaCakes118
-
Size
100KB
-
MD5
fab5ea831d8b8afed62cd9651dee75af
-
SHA1
875108589d4f80a3a4b67e6ea173c24b260cd9e0
-
SHA256
c317496201cec8f8da42bec7382fbcaaccb19d6c579eb4380dbbbfb0e90e8e1e
-
SHA512
d65544dd2da0ea23e0061cd2965af0eb3441975335eaa4cd240a43c8e8c1968b2bb8f9935d55404174466361509921af8309718e9910136ae104bfd3f2d8238d
-
SSDEEP
3072:L+tiY3MEyLQb/h4ili7HnIKGpU5DmHWsOoI:KiY3Mezuig7HnIKoUIHvOX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab5ea831d8b8afed62cd9651dee75af_JaffaCakes118
Files
-
fab5ea831d8b8afed62cd9651dee75af_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE