Static task
static1
Behavioral task
behavioral1
Sample
08d5ca5513a82ca3fa35a7a616220c97_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08d5ca5513a82ca3fa35a7a616220c97_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08d5ca5513a82ca3fa35a7a616220c97_JaffaCakes118
-
Size
1022KB
-
MD5
08d5ca5513a82ca3fa35a7a616220c97
-
SHA1
3a29fde30bf63e7ba81606fa19552d13d1e647b2
-
SHA256
1d0dad2a42995286568406ddb4c4a0d658b9b1e3d7b87d3b2209f292a4841e1d
-
SHA512
b84aae892f9239c6a330f512d4089204f1ed15447fa016880df8acafd7ea50733d5e7283d0606540dff3c9018e30c70554ab3d3fe76529ad77a9d2595fd9837f
-
SSDEEP
24576:1IBA/lmidLqz+tJIfb8LJPu56ymOxuiUue4uvMtP2sMtVC:1IBqlrdIYamPu49huyMtP2sMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d5ca5513a82ca3fa35a7a616220c97_JaffaCakes118
Files
-
08d5ca5513a82ca3fa35a7a616220c97_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 313KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
muhvdmcn Size: 696KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abjtroca Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE