Static task
static1
Behavioral task
behavioral1
Sample
4f6928ac042fe087533e8d7f4fbc4b74_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4f6928ac042fe087533e8d7f4fbc4b74_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4f6928ac042fe087533e8d7f4fbc4b74_JaffaCakes118
-
Size
1.6MB
-
MD5
4f6928ac042fe087533e8d7f4fbc4b74
-
SHA1
59cb8e3ed172b41351ae9a8a6e15cd7efdc0250c
-
SHA256
ec5dde3e68cf7ed672be82433da49a7c44bb2c109956b2b29161e0b3f34b025e
-
SHA512
efcf031b00d16a2fd406cbdc35ca8a1bcc6679fcd72c169e56c6231074fb7e74fe21ffb586970c48ad57090412c24caa15890f7bad44654c7f2deb39772401a9
-
SSDEEP
49152:LbwBhGDF0hFkGTjE5aO4jxwk2mBXhWaMEC5jHxF:gaD+heG3MN5xNEC5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f6928ac042fe087533e8d7f4fbc4b74_JaffaCakes118
Files
-
4f6928ac042fe087533e8d7f4fbc4b74_JaffaCakes118.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zdkldmfl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jquizjvs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE