Static task
static1
Behavioral task
behavioral1
Sample
0311c4c81eaaf6e90682d389d5f99151_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0311c4c81eaaf6e90682d389d5f99151_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0311c4c81eaaf6e90682d389d5f99151_JaffaCakes118
-
Size
2.6MB
-
MD5
0311c4c81eaaf6e90682d389d5f99151
-
SHA1
2b8eca9676333aae2e7718bb96615faec857e53c
-
SHA256
27ad1281e16bd96c92ef8021ab78052b28cf3edd29d058cd9139f66f834fe3aa
-
SHA512
e524aa00eebe578839626407549afbd7d3cef2d2e6aec388229b59974eb65df0e1531d956cede657853d000cfded84545cfb6704fb61c016f982ab98d9b4a317
-
SSDEEP
49152:LvL+JvAyKkiSoUY+pFnZrWBl7HkGwOM2JiP7Ijr41eyKFjf/1gFUnN:LT+VA5CoUY+3nGl7EGwOM2JS7Ijua+0N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0311c4c81eaaf6e90682d389d5f99151_JaffaCakes118
Files
-
0311c4c81eaaf6e90682d389d5f99151_JaffaCakes118.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 144KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gomkngdx Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
exxeysiq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE