Static task
static1
Behavioral task
behavioral1
Sample
2990ef1b8caa03dace4ad133f2e15b00_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2990ef1b8caa03dace4ad133f2e15b00_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2990ef1b8caa03dace4ad133f2e15b00_JaffaCakes118
-
Size
820KB
-
MD5
2990ef1b8caa03dace4ad133f2e15b00
-
SHA1
0ab1255553ee1cf8fc328adda7f0b1b01cdcd029
-
SHA256
2647d450828953440cca201933f38c7fb5041264b335ae3dff50d3956f432e51
-
SHA512
ead459a57136b280d76fc042ac66eee50e5b89fd259eb8c52bf5ffa0cddf57726249e3727b8c1d74f9e181ffcca30d5130ab9c24c2fc7ec859fde20e15f60bde
-
SSDEEP
12288:oqkVTFabjjkTilUKtZqA5AtWBp6YiToPWFk0x+TWOfXAQsiain3Qe1eD9AaDQ0XV:oryaYB3qA5XiToQkcvO7gD9AaN9S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2990ef1b8caa03dace4ad133f2e15b00_JaffaCakes118
Files
-
2990ef1b8caa03dace4ad133f2e15b00_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dpczvxhb Size: 685KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edjnuscg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE