Static task
static1
Behavioral task
behavioral1
Sample
28846869b83a7849ef8179e431e5bc58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28846869b83a7849ef8179e431e5bc58_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28846869b83a7849ef8179e431e5bc58_JaffaCakes118
-
Size
932KB
-
MD5
28846869b83a7849ef8179e431e5bc58
-
SHA1
df837ceb2a4a55a0b5cb658ad9b1ffce442e9872
-
SHA256
08cafc50d53150ac400afdf76a119f9f3c5e34a7f562e0001616cfbee5393ea7
-
SHA512
7ad13a519951f65fd51a284823ab82864f494b4831d961cafe8531da35e09d0eb9a5f4ef0a16ff9f3de58a9500323e9c101fea0a64af4ec3ef0af6cb6c464e8a
-
SSDEEP
24576:vjTDIbYgJwApYXGr2kCZ7NMJrtVyCR8TNtZizXG0Avy5V1TmjNKFso:bfgK92CzOtVeTczXUy5XijYF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28846869b83a7849ef8179e431e5bc58_JaffaCakes118
Files
-
28846869b83a7849ef8179e431e5bc58_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dchpaozw Size: 839KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
svmvxioc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE