bohvkcmek
Static task
static1
Behavioral task
behavioral1
Sample
167a60bfdfcdac31f8dbb2d51e44f141_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
167a60bfdfcdac31f8dbb2d51e44f141_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
167a60bfdfcdac31f8dbb2d51e44f141_JaffaCakes118
-
Size
32KB
-
MD5
167a60bfdfcdac31f8dbb2d51e44f141
-
SHA1
fd0446a4db1ae4ee766f7d1d6b40f343e87a71d0
-
SHA256
8e405503ebaf6ae413f7596e1dcf7c4669196e0476992ec29182e1f7ca7a3027
-
SHA512
c4ede01db0e27918240c653edc04050abf8ab29cc7e3e73d3abb8edcb662468a176d504a49f6ec1ce209a8bb8aa94f92d9e8ef62253b762e2da5ed684bd81ff2
-
SSDEEP
384:aIXeKq9vPP/3J3l6RhHgAbvAohpVaYHgja6nMfnDqIRyh5kFRD8OjFbemB/g9ESg:JI56PAne76nMfDqls1xbf5ggx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 167a60bfdfcdac31f8dbb2d51e44f141_JaffaCakes118
Files
-
167a60bfdfcdac31f8dbb2d51e44f141_JaffaCakes118.exe windows:4 windows x86 arch:x86
e1ab7ea21c490d9b524065bd81c3d173
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlCanonicalizeA
kernel32
HeapFree
HeapAlloc
GetProcessHeap
user32
SetLastErrorEx
winmm
auxGetVolume
Exports
Exports
Sections
.code Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 409B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ