Static task
static1
Behavioral task
behavioral1
Sample
1a506c9af6eff57b32a827c6e3984392_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a506c9af6eff57b32a827c6e3984392_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a506c9af6eff57b32a827c6e3984392_JaffaCakes118
-
Size
8.9MB
-
MD5
1a506c9af6eff57b32a827c6e3984392
-
SHA1
0c83aba332ffe7f1bc58199610b5df74617197ea
-
SHA256
2d5a09de0c0242faf391ac58b34df37ac2bd005221a4e9aa8c06837f9012407a
-
SHA512
19eced3e24baec2297e83d83df73d43949616767bebe66aa738b8180c8f11a1650cae2a6db3271cda859518fa0623ba30b84239e727f5bb97a5526d3731eb4bb
-
SSDEEP
196608:Nahxq/gv17eat25iXgBwScFV/+neSZbdwfsz/L/SkPbsWdKRry7NT5U8T:Naa/gvhRk5iwB9cFV/+neSx/cdRrytUK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a506c9af6eff57b32a827c6e3984392_JaffaCakes118
Files
-
1a506c9af6eff57b32a827c6e3984392_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 28KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lhedrdnt Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yxaqygfh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE