Static task
static1
Behavioral task
behavioral1
Sample
f2c7810937fed393d18f7367e5cbf376_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2c7810937fed393d18f7367e5cbf376_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2c7810937fed393d18f7367e5cbf376_JaffaCakes118
-
Size
3.7MB
-
MD5
f2c7810937fed393d18f7367e5cbf376
-
SHA1
f13b10331c122ac1472618771aadd71a1d079bf1
-
SHA256
0fa41039eacfc52d17d86d07d03b144fa25cac9b0dd41818ccbfc81fa819f8c3
-
SHA512
f314486367be9881d7e2dd3e42b7ce3de7d9bae3591d91e479c10de7314c4c5841f3d5d9d1d91be9008ba73de8bfbe5e02b9dfb6263ac468096eead73c3da17d
-
SSDEEP
98304:NpGcbhnAKFy/P8Mi9ZDJG4RDS6qL/R6SiNBdhZIuCHw:No8V4uD9q0BXFh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2c7810937fed393d18f7367e5cbf376_JaffaCakes118
Files
-
f2c7810937fed393d18f7367e5cbf376_JaffaCakes118.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 60KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 440KB - Virtual size: 503KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
icrvzmsj Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
anpzlgro Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE