Static task
static1
Behavioral task
behavioral1
Sample
0fcbf315cfd0a09c6e7cf561adf40b35_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fcbf315cfd0a09c6e7cf561adf40b35_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fcbf315cfd0a09c6e7cf561adf40b35_JaffaCakes118
-
Size
870KB
-
MD5
0fcbf315cfd0a09c6e7cf561adf40b35
-
SHA1
af1ee63e8d5abe8faad1d282e2ec324241498a66
-
SHA256
18efae10f6cfce0f3c7e851cd79571f6a672a2a55e5be8f3aa9edc0da2d4c670
-
SHA512
449c95ce47316d7d56272e68d5eb7c98ddddd43b46df134aed9f26fd29f1d7989b319eb666201edb08d8b53ee5b93e46bd51c9c955c4a4f63802f7b100beb422
-
SSDEEP
24576:G5DDSVOEJWRjLlHDKeCxG3BGHVQ3reTM:G5DDSVOECjFp9rp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fcbf315cfd0a09c6e7cf561adf40b35_JaffaCakes118
Files
-
0fcbf315cfd0a09c6e7cf561adf40b35_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pwitlcjn Size: 849KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hltqicbm Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE