Static task
static1
Behavioral task
behavioral1
Sample
0bca274b037d745a38d860acf48f9eee_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0bca274b037d745a38d860acf48f9eee_JaffaCakes118
-
Size
878KB
-
MD5
0bca274b037d745a38d860acf48f9eee
-
SHA1
1d7313cd5ec671eea2d3981bdecd0279242fa98a
-
SHA256
0fc4fb294d97d7d694d24954d74d4f93712abf8f3cdf0502bd37697b7d02a2eb
-
SHA512
39ecf588e433eb85f67d84686ed9009310e9c4974dbfd3dc84eaf99507affa98f5c29203e9a25a9f48784ee3770a6347b82a780c9577b21e2cbdcd0d84eb8c58
-
SSDEEP
24576:YIUsIc7xn3AEA0KiungtLZKDPBr2IlvNv2aDEsIAM8qFPrb4:YILwb5iWMZKrN2IdNualI7Vrk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bca274b037d745a38d860acf48f9eee_JaffaCakes118
Files
-
0bca274b037d745a38d860acf48f9eee_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b2d79cfc407e50b830e187a48b0d8b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WideCharToMultiByte
Sections
ajktaltk Size: 324KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
auvaktaa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uagdkihi Size: 530KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ywvulhxc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE