Static task
static1
Behavioral task
behavioral1
Sample
40688d57a661fd9fb32ef00b760777d2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
40688d57a661fd9fb32ef00b760777d2_JaffaCakes118
-
Size
815KB
-
MD5
40688d57a661fd9fb32ef00b760777d2
-
SHA1
c6bffc1e1d1416357017d38ff9a2bc04d87ce125
-
SHA256
0b6d15238b5a7e3d580e24871495019c2186149b3d7dbe2d9bf0668ed50749d0
-
SHA512
990e1004d488fabf0b0b72172f1bf1f41c6df48277703f363f891ad21bef8de6a9ad8fa69f53c55825d16df68eabcc0896319d2cde7d670c312d252cf5cbf5e5
-
SSDEEP
12288:IE3YeiDFvZrO2tN/x2Gy7+5dmhMsiHAmZ6QG9WIBwXwprnkFtEI4IAH43PorUPnV:cvI2RryuLjZMWuw0rka4/o4SNid
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40688d57a661fd9fb32ef00b760777d2_JaffaCakes118
Files
-
40688d57a661fd9fb32ef00b760777d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 29KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
olzftifh Size: 771KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kzyrgwpo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE