Static task
static1
Behavioral task
behavioral1
Sample
f8d3f504e60cf04b7295061d5ef85812_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8d3f504e60cf04b7295061d5ef85812_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8d3f504e60cf04b7295061d5ef85812_JaffaCakes118
-
Size
3.5MB
-
MD5
f8d3f504e60cf04b7295061d5ef85812
-
SHA1
8d81519b20fd90417637e5f911fee4cd1e327518
-
SHA256
36e3369faf50235fff736c5feff6cd043eec5a0d811f0e03b5d2da4cfbf3a75f
-
SHA512
bb68bcb2073bbf082f3eb70ff896f96b53a198c7fc64c31c572044ebf6234ffb7d89742859ca3a603678ee9687a385047438545a55a0059bb701c63b9863e5f8
-
SSDEEP
49152:zQEk0E9WoLK1l4HZ+/ftFcFlIhaTueVgv9Bp+DO8nAsD/IOHmMSuYDE:zQ/0EMwKF/1JhuV2VGVAwPmMSuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8d3f504e60cf04b7295061d5ef85812_JaffaCakes118
Files
-
f8d3f504e60cf04b7295061d5ef85812_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.8MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 750KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
slitsvxy Size: 964KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vwklnvtr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE