Static task
static1
Behavioral task
behavioral1
Sample
180d68df49aa1b2eba08547e09cd36de_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
180d68df49aa1b2eba08547e09cd36de_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
180d68df49aa1b2eba08547e09cd36de_JaffaCakes118
-
Size
1.4MB
-
MD5
180d68df49aa1b2eba08547e09cd36de
-
SHA1
49bd135361575110a6fb93cb3061493ce7d530f1
-
SHA256
9680b73418de2a1f9b6fe9aa4d6293824e8fb313d81205fcdb17580b26c82b39
-
SHA512
6477e6d1b9a0d7b5070b3fc01f863e5a245008069e86b12f7169ae69c9ec9d90ca0f9829d11577d87dd96555b81aa4a77aa3e5afd7494f7e5f3e7e5b39ee1268
-
SSDEEP
24576:WUGOGRaHM2u7djqJSuAju2H1EMHQNLs1J9K7uTtgrNeEv5zGvs6wX0MJtTQSv7sx:Fshj/pu2HhHQNLwJ9HgkZvsrtTVZe1Dv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 180d68df49aa1b2eba08547e09cd36de_JaffaCakes118
Files
-
180d68df49aa1b2eba08547e09cd36de_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 484KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ohexppvi Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xjylqrqo Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE