Static task
static1
Behavioral task
behavioral1
Sample
41c5d1502a59741d83f6bcfc2dfabbc1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
41c5d1502a59741d83f6bcfc2dfabbc1_JaffaCakes118
-
Size
100KB
-
MD5
41c5d1502a59741d83f6bcfc2dfabbc1
-
SHA1
50f96f802e4e26ad479d6572c881122c41e2f20c
-
SHA256
eb7ef335ddf50865e19e478bc94d1b902f825c6c9a36b1281007e90d419cd5c5
-
SHA512
7ba3c6a008658739da668d2726e6cf4d79e492a1549bbfbfc700da740be8eed46598d9970896c82f13d3df84964935a04bfd524363de3e4b8523edc3970ec8fa
-
SSDEEP
1536:1dZzDRgd4YTxcr96rbU9yGNPKQsOIiHzhCzCKSQFYUGp8BSB9Qi+t4LaGnm:PZzVgdH0qou2dhID8W8Laq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41c5d1502a59741d83f6bcfc2dfabbc1_JaffaCakes118
Files
-
41c5d1502a59741d83f6bcfc2dfabbc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE