Static task
static1
Behavioral task
behavioral1
Sample
17ccfcf627e8b470e2fb62e2a2a86d60_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17ccfcf627e8b470e2fb62e2a2a86d60_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17ccfcf627e8b470e2fb62e2a2a86d60_JaffaCakes118
-
Size
1.1MB
-
MD5
17ccfcf627e8b470e2fb62e2a2a86d60
-
SHA1
8926921fa727c94050b4386d59b323c5990af9ed
-
SHA256
a8bd295dc4113d57835471a800bb07a05fe38afc9027a7549f624088c6ec64ad
-
SHA512
03f6bf6334a60c09db5b3a41f262998ef5331b83aed2ba8817c55fffd55960b7473c0c35a69cdeae494d881e79922b9d76ea0fa2298c4b4cd960baa07e9b0ff0
-
SSDEEP
24576:ge70f1ZLUnJcugCxyN4nSs8G2g2eATJ6h0OKeCC2McMAu9eEDhXn:rWffxvaHABpJ0KGKGD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17ccfcf627e8b470e2fb62e2a2a86d60_JaffaCakes118
Files
-
17ccfcf627e8b470e2fb62e2a2a86d60_JaffaCakes118.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fmqngoxf Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hjibjxnw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE