Static task
static1
Behavioral task
behavioral1
Sample
08b6bafe40b9d0a5a3663567dfaf67fe_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
08b6bafe40b9d0a5a3663567dfaf67fe_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
08b6bafe40b9d0a5a3663567dfaf67fe_JaffaCakes118
-
Size
2.1MB
-
MD5
08b6bafe40b9d0a5a3663567dfaf67fe
-
SHA1
b1496d662a9178fa6cdba42d3639ccb148b3d015
-
SHA256
e310096e361a558c51ff56f42c2639aba9027c02030888604e0f1c51afb06573
-
SHA512
27e38e1ef087bc543c51bf3fad3f4e3ada0297ecedac988d60e677fd813669cc64b1c950e9cbdce4e69a3158554f9e5d63c5e16755c042b7d2fe283bd0f00b59
-
SSDEEP
49152:64HN7MMqMf8Rr2a7NlwifjNeYq2aTe2PuC:6y7MMwJvvLoRjrP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08b6bafe40b9d0a5a3663567dfaf67fe_JaffaCakes118
Files
-
08b6bafe40b9d0a5a3663567dfaf67fe_JaffaCakes118.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 355KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kenfogza Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
neczzvts Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE