Static task
static1
Behavioral task
behavioral1
Sample
1a8587fcd3b71f44dbbb2c47a62c2260_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a8587fcd3b71f44dbbb2c47a62c2260_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a8587fcd3b71f44dbbb2c47a62c2260_JaffaCakes118
-
Size
1.6MB
-
MD5
1a8587fcd3b71f44dbbb2c47a62c2260
-
SHA1
e812d9f0672aed417399fafc59b11e97617ee38a
-
SHA256
10dbf43e94a68415f85d0dc5d3ab802f8401e78b83e2afafe7be89953df809f7
-
SHA512
39937ff5b29126f91f93930fb8c1989e73b4e73b05f42819a721d324d008fe790e66bb961c875b6d3f6a6104540a29aaea924280361ff6dc758abcddc12bc55b
-
SSDEEP
24576:VC56xZ7Yo7DFErXE4brDFpY3IvERGaFT56qkBMqaT24oBI3FFq5xqYwc:VK6H73tEDpX6IvERjFT0rBkABgSDqYw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a8587fcd3b71f44dbbb2c47a62c2260_JaffaCakes118
Files
-
1a8587fcd3b71f44dbbb2c47a62c2260_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
ttknpjdi Size: 28KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gippldhc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
akkaidwx Size: 1.5MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghwvrokq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE