Static task
static1
Behavioral task
behavioral1
Sample
0d1df4165603690b628b5d7b54f1ad81_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
0d1df4165603690b628b5d7b54f1ad81_JaffaCakes118
-
Size
2.1MB
-
MD5
0d1df4165603690b628b5d7b54f1ad81
-
SHA1
2f95a4c3d9fe8d6b02f41f17328dba6a7401e9aa
-
SHA256
55a4c453faa6207f8a1896a3f05f9349108b2f518bfde11fdb4f275c07aeca4c
-
SHA512
8499b613629e1709a1972c4b706b66307470b4c5208fbe0b9cb353c34f8a6b245ff24ee416a862830a3b4c7dfd645abe59957d1f08ee62ee7523fa0a07928c18
-
SSDEEP
49152:M7VNWErnngnnnKnanz+kBxdStFNBzYcie7XOFcX1sT4q/4/Qc:MZNWKOTU+qXKTVQ/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d1df4165603690b628b5d7b54f1ad81_JaffaCakes118
Files
-
0d1df4165603690b628b5d7b54f1ad81_JaffaCakes118.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 95KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocwegxyt Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bfyzatci Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE