Static task
static1
Behavioral task
behavioral1
Sample
09b0b7a09e2fef44cebefa08850b10a4_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
09b0b7a09e2fef44cebefa08850b10a4_JaffaCakes118
-
Size
6.7MB
-
MD5
09b0b7a09e2fef44cebefa08850b10a4
-
SHA1
aa52806ab539101de736a778389b31be2acb2ad0
-
SHA256
7be1b4c0f8feaabff9e4c421ca2437f74a5d8cfc11aae46fb8d5c58a5304b521
-
SHA512
5d4c184b0eb7ce2e5e57229c99272a9f35f36ac5c430bf12f2525e301087d5d0baf9acc6a6d27519564fa3cf74127caf9c09e29a7f00d1560a128cbec43ce2ae
-
SSDEEP
196608:OcF/2zq0Qh3KaLf/tnjfNmmtode4VzFvUDJKD6m:Ok/2zqFLdjNmFde4D2zm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 09b0b7a09e2fef44cebefa08850b10a4_JaffaCakes118
Files
-
09b0b7a09e2fef44cebefa08850b10a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 22KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 477KB - Virtual size: 721KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sidevvls Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lohtllps Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE