Static task
static1
Behavioral task
behavioral1
Sample
31d53f9b7e905dc817ba7428d2c5b52c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
31d53f9b7e905dc817ba7428d2c5b52c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
31d53f9b7e905dc817ba7428d2c5b52c_JaffaCakes118
-
Size
2.4MB
-
MD5
31d53f9b7e905dc817ba7428d2c5b52c
-
SHA1
5cd065e6352e10079e8943b0f378632447a08b22
-
SHA256
3dddcfbc65be37da36e360add1fb6b703a5fd846915e1b1ce78501c4c6c49d72
-
SHA512
bd4324b508bb5b3e5b6fe89ac28d422825e03375451ae86365c469ba3b56b2687d95626546d8b26a347dffed40fe721264f0166dd9c3675b12a1ca1e6e4ef6b1
-
SSDEEP
49152:GB5GFo1Pe7B8CqBm9lJWk2oY9PYVyRaZrNmsa6vj7fhMuP:y5GFo1e7BjqBmj4cZQN+28
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31d53f9b7e905dc817ba7428d2c5b52c_JaffaCakes118
Files
-
31d53f9b7e905dc817ba7428d2c5b52c_JaffaCakes118.exe windows:6 windows x64 arch:x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 77KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rskgbmdc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pyaeflpz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
-
-
.idata
-
.pdata
-
pyaeflpz
-
rskgbmdc