Static task
static1
Behavioral task
behavioral1
Sample
93bbe136fc1990fca6b8a6f95d63b9ab_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
93bbe136fc1990fca6b8a6f95d63b9ab_JaffaCakes118
-
Size
3.5MB
-
MD5
93bbe136fc1990fca6b8a6f95d63b9ab
-
SHA1
c12010f9d13a437d9898655ef453d3acee49164f
-
SHA256
196156028a933e301c0827bfc96d4d3046620caafa6922e6739c99c5ad1502c6
-
SHA512
6e2983ac4597f388fa852273b99ce0a0911bd934758acdee98326595b34ba1a0464239a2706967bfe75290a775a503dfca3692a15adf82751b557f328445469a
-
SSDEEP
49152:h/y94EHRiqEIMOOUeToS6Z2/W1weOVZluWQ+KVRCNk+eDAOr+chJI+od3bSOAeDX:h/y4qRklWBxVWl+tL65kfod35D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93bbe136fc1990fca6b8a6f95d63b9ab_JaffaCakes118
Files
-
93bbe136fc1990fca6b8a6f95d63b9ab_JaffaCakes118.exe windows:6 windows x64 arch:x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 367KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cvnlarld Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdkpjtql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ