Static task
static1
Behavioral task
behavioral1
Sample
477d651a41f87a19fe4e487cd46639c5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
477d651a41f87a19fe4e487cd46639c5_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
477d651a41f87a19fe4e487cd46639c5_JaffaCakes118
-
Size
1.8MB
-
MD5
477d651a41f87a19fe4e487cd46639c5
-
SHA1
0fb69c6f1521f8ee8bcb0d17e97164e10436cafd
-
SHA256
b417b6b95e15ed1d05d10d8d39bdffd5613ec37db261219266f59ede771c137c
-
SHA512
19c53311d2ce899e5fac54c61dc76a19ed72c2b631b343e105d82ecb0dbaa7aca9eb7dc82aa6f2d072d3e3d1b8ae4214c9e01992a280735b6bde12f9962c0ab5
-
SSDEEP
49152:WDhahrZwydMqtyxRNf/feiVgAzvttrgF+hqCty:WDh2rZdMtRXfebAzjrdPt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 477d651a41f87a19fe4e487cd46639c5_JaffaCakes118
Files
-
477d651a41f87a19fe4e487cd46639c5_JaffaCakes118.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 50KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nxtaztrq Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvmrpigp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE