Static task
static1
Behavioral task
behavioral1
Sample
73724d3a89e86bd39f6085b09651156d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
73724d3a89e86bd39f6085b09651156d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
73724d3a89e86bd39f6085b09651156d_JaffaCakes118
-
Size
1.2MB
-
MD5
73724d3a89e86bd39f6085b09651156d
-
SHA1
c4772a34bbd4616f57938d6dffed893fda31132f
-
SHA256
41088ef88942366234d3df66d21a16c337922e10f5e5b6103a77d8a0609d86d6
-
SHA512
4f8903ad2667518abdab658a93a99aab3056bf0f57d1eca4364c7a4706e3cfd6c02af7890ddde0d9adfb0015fc5c506d82ae5b8241257770652d1e70ca2b56da
-
SSDEEP
24576:R7oHpP4V1lY9bh4H5Cj7Hj/LsFxNsLrIi8m5Sau4HlofIRfg0k:R7861iU5C/jIEB8wSelRfzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73724d3a89e86bd39f6085b09651156d_JaffaCakes118
Files
-
73724d3a89e86bd39f6085b09651156d_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 43KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bjsrmngt Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fplidlzg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE