Static task
static1
Behavioral task
behavioral1
Sample
21d3e95e3d2a4132d0a295d4617e31a5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21d3e95e3d2a4132d0a295d4617e31a5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21d3e95e3d2a4132d0a295d4617e31a5_JaffaCakes118
-
Size
1.2MB
-
MD5
21d3e95e3d2a4132d0a295d4617e31a5
-
SHA1
63aba5c2d2699102aae6c18c8f84aa06c416c8df
-
SHA256
5745ef593eb0a298b513b57841db5875cf17e72a735e15701dfcff96043980ad
-
SHA512
3feb060df113667f65d302bebe22e585810077b900fbc4a42b93a0d003f2d0793664065273bac70e4743081cbf5a28bd9a2bdb87853570a767e5a492905eeb0a
-
SSDEEP
24576:E0rufU0ykW6MINGftTdMhGhl84ESyRrwNyjBsQgs2lCaYJKlZ7UBbm7:fq80ymUlRMaIRkYS5hCaYIwb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21d3e95e3d2a4132d0a295d4617e31a5_JaffaCakes118
Files
-
21d3e95e3d2a4132d0a295d4617e31a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 158KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewrhyfbf Size: 949KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkfkdcmv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE