Static task
static1
Behavioral task
behavioral1
Sample
04c971f2d9612bdeed19c6f1dce4eee6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04c971f2d9612bdeed19c6f1dce4eee6_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
04c971f2d9612bdeed19c6f1dce4eee6_JaffaCakes118
-
Size
8.4MB
-
MD5
04c971f2d9612bdeed19c6f1dce4eee6
-
SHA1
931518a3a2969ebc99feaa4058f6fe5f5c74ef82
-
SHA256
34e7436a38810ec887ece6c4a1b09f445542c47a23acbb91d04bff04a459f25d
-
SHA512
7409929984ff48c0b9e35c407ef083374c1b43d5d28d2ed49d31e802133234206261e34ad40d32d347a567f1fdc33b95aebb17c1e28b013f211d1594378cab63
-
SSDEEP
196608:qLbJgqdpvaaH1qvJZN5qKJ7SXxZfdTmoIeD3qiwN8RoVwCSGxQqFGJ:q/Jgqdp2t5qKJeh5D3qimm8wCFjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c971f2d9612bdeed19c6f1dce4eee6_JaffaCakes118
Files
-
04c971f2d9612bdeed19c6f1dce4eee6_JaffaCakes118.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 370KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bdrhrqaj Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pzyzkqry Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE