Static task
static1
Behavioral task
behavioral1
Sample
fb09e8912dfa18d62366598fca47f58a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb09e8912dfa18d62366598fca47f58a_JaffaCakes118
-
Size
95KB
-
MD5
fb09e8912dfa18d62366598fca47f58a
-
SHA1
9526f3c92691878b7d00bceb238eac6009b8be15
-
SHA256
b8a80eb14f2d471c565adaed0d1ca5c68545d8a7fd7ad3f5c89c244f49d7fbb4
-
SHA512
ea5f11d260bfae8be543375f65bb4c69c41b3b63000cf5e51f600b22a9e26787c53ab51c57251e40d601d558efce0318a1bd1d1b4604a93937bb95132d904e21
-
SSDEEP
1536:XZ/nEkh8OTKNUvFjmbNgsEojGDQcdvWudcojC813WWaGhGk52Fos:BxhTKNQFjkNg58cd+udcoH3Hxs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb09e8912dfa18d62366598fca47f58a_JaffaCakes118
Files
-
fb09e8912dfa18d62366598fca47f58a_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE