GetInstance
Static task
static1
Behavioral task
behavioral1
Sample
f20a7868fdc22bec7021d51ef5d2062f_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f20a7868fdc22bec7021d51ef5d2062f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f20a7868fdc22bec7021d51ef5d2062f_JaffaCakes118
-
Size
1.8MB
-
MD5
f20a7868fdc22bec7021d51ef5d2062f
-
SHA1
da350cafd14ea69fd29f6590834410689b5b60ed
-
SHA256
5920fa309ecf1bb1edd30302595b78c79b0d1ab978b4befcd33577be7a748630
-
SHA512
d460c0b4316902ff3406b60c19d03041c6d83aee3d8942e5be8e5f9dce3356284c1c34cacd1ec20caccbc42d649f011593ab6ba3db6ce9d1ac49ebbcd6a5e42c
-
SSDEEP
24576:d8mldUxNcLrWngO8+l6lFv1Cf5IFRbYGvJ7EBBbryCB1Lmiuuz5L8XNoO/MR5urX:d8mLUNc3WXDOwBIFRbv7wx+UVaM+DC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f20a7868fdc22bec7021d51ef5d2062f_JaffaCakes118
Files
-
f20a7868fdc22bec7021d51ef5d2062f_JaffaCakes118.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 274KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mrqnjjgl Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vnqgjdrs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE