Static task
static1
Behavioral task
behavioral1
Sample
2666a4c2a3bd8479295ae4a166f06db3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2666a4c2a3bd8479295ae4a166f06db3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2666a4c2a3bd8479295ae4a166f06db3_JaffaCakes118
-
Size
1.2MB
-
MD5
2666a4c2a3bd8479295ae4a166f06db3
-
SHA1
200a6e229a8a46b26dad951e956a568d18276514
-
SHA256
b0fe8b8e08df5da739c26ff9997fb3622a96aa6940275fd6df1e8138f55fda82
-
SHA512
02ef266cf1be6521ef6de7659acdb1eecd5459f201873be915b641c7719605a606cd4198497fb2fe220dc3e9b13b2d3c89a827e82a3159d36577e4538bb4ee72
-
SSDEEP
24576:6tz9tQcNRvZgKJ0xHL1L39pqqpXIxEWTkpI8:KpLO9Vh3Lz9tWTIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2666a4c2a3bd8479295ae4a166f06db3_JaffaCakes118
Files
-
2666a4c2a3bd8479295ae4a166f06db3_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
CODE Size: 322KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 42KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 811KB - Virtual size: 811KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 67KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE