TMethodImplementationIntercept
Static task
static1
Behavioral task
behavioral1
Sample
9620c4254536b896e54653ae45177d23_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9620c4254536b896e54653ae45177d23_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9620c4254536b896e54653ae45177d23_JaffaCakes118
-
Size
8.5MB
-
MD5
9620c4254536b896e54653ae45177d23
-
SHA1
559ab96ddbae8daefd73406ff2b140c4a31a2cd5
-
SHA256
ab4256602c855c568f707472384ead77cefa7867e65760b6e5f6b8c33fa466c5
-
SHA512
e50c57a1c6cab740e3814737ed05fffcabd41a630bbc34c1a4b27010c3245b20af225eb35dde861fb5ca5c5d5422762c820488fef40e3b20f91322ed7ecf642e
-
SSDEEP
196608:AwzaewQ0Uq9aSSZjsPaLjTpwQ4PL8A79lPmtV84zDjKz:Tzae6UXdt3WQ4PIARlPm0gjKz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9620c4254536b896e54653ae45177d23_JaffaCakes118
Files
-
9620c4254536b896e54653ae45177d23_JaffaCakes118.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 4.1MB - Virtual size: 16.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkplnkgg Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qrazrpjs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE