Static task
static1
Behavioral task
behavioral1
Sample
0e85608567d7924b9f74f05c83e9841b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0e85608567d7924b9f74f05c83e9841b_JaffaCakes118
-
Size
1.2MB
-
MD5
0e85608567d7924b9f74f05c83e9841b
-
SHA1
414b0bd029e1e12cdd6e0bdc5c7686656de3331a
-
SHA256
a8e895b038dadc59d406991bfb62f7b94ec33aad41fffa38ed406a9cd84f61b1
-
SHA512
398296b2d43687a7978849f256eaeb8d260e228747c4fc160d3d3cc50d549e7ca11f8d973cdbc7feb9be3a2362180289e18015d669444fcb354d7e480ecad740
-
SSDEEP
1536:U72D0IbKpqbUB4eo6q3js6x3ihkMWYQf+Hpp0tg9dkAkTPuRGvbBGu+y2kBBp:UyDkQA6ezqgg3eWYSFC/k69i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e85608567d7924b9f74f05c83e9841b_JaffaCakes118
Files
-
0e85608567d7924b9f74f05c83e9841b_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE