Static task
static1
Behavioral task
behavioral1
Sample
09281cd743f0fa70178844b1c11e91f8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09281cd743f0fa70178844b1c11e91f8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
09281cd743f0fa70178844b1c11e91f8_JaffaCakes118
-
Size
210KB
-
MD5
09281cd743f0fa70178844b1c11e91f8
-
SHA1
f9e5f2eb87b1d5c0ca6fea70cb9c773d29a72319
-
SHA256
9204f839dbb181f7554d9f84121a63960dd9b6819163551a203b2128fe5aa7d4
-
SHA512
23252ec001bdef84a2a9df686fe0645a3a875bf1bcbb94c58340c8ccc9c53fcaad6b885d372578189f22170a43aa05fc6bf63f2e634a10e314716a3a81375695
-
SSDEEP
6144:koGbDOaIyLedwcPSNivkRXrzuJosGrhorXpw:kxHOWNivkRbzuJo1irXpw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09281cd743f0fa70178844b1c11e91f8_JaffaCakes118
Files
-
09281cd743f0fa70178844b1c11e91f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wcscuhcy Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ihydaddn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE