Static task
static1
Behavioral task
behavioral1
Sample
0cd269e7eb6caba1026cd4399b7e6562_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cd269e7eb6caba1026cd4399b7e6562_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cd269e7eb6caba1026cd4399b7e6562_JaffaCakes118
-
Size
1.9MB
-
MD5
0cd269e7eb6caba1026cd4399b7e6562
-
SHA1
b4b4b0c11ec7a96afe1cd737ca39c0e70a109f3f
-
SHA256
c4e45e479e0f12b14ee951380e406b22cd61a4ec768fbb055ee1e8ea260e536d
-
SHA512
1d32a67f6cfb99d9f8bce6fd8ebf81ba6865db7a299757ee7a9c43b13c3cad6c87b6d5fd4918c370f4422a7aa76d98745c6866f3c6d66891b3e95fcb6430544a
-
SSDEEP
49152:rwhHkZFoycYLaxwjma+gZeXRu5O2gaDXOh6yMH60SvT:rwdkZFowax6Y1HhlK6LT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd269e7eb6caba1026cd4399b7e6562_JaffaCakes118
Files
-
0cd269e7eb6caba1026cd4399b7e6562_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 166KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 741KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
infmmiox Size: 989KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tanhtcpw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE