Static task
static1
Behavioral task
behavioral1
Sample
5f30c6423d303dbdcacb17db433814fa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5f30c6423d303dbdcacb17db433814fa_JaffaCakes118
-
Size
1.1MB
-
MD5
5f30c6423d303dbdcacb17db433814fa
-
SHA1
c40f67516293c61136b4c0d1acfa5b4939f8cce7
-
SHA256
4ebf674577c4f03ade9c09c4c08abfaeb1fcb3b2b421cffe788e1b695ca9c877
-
SHA512
fad862641249127965f874f0ab5a0cc498c4701e7f0cc62ffc1e5207e1f156b48e2accce9159e2d451ab69d0771ab54607ca835971063985239b05d37295daef
-
SSDEEP
24576:7rKhHcy0zong9j+G55ALg7b2vtrX+9ajMqjDfP8VRlSyMyAYWUJYZCH:7rKhP0zAeRkZu93wyRlSlyYZCH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f30c6423d303dbdcacb17db433814fa_JaffaCakes118
Files
-
5f30c6423d303dbdcacb17db433814fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fkyjgumw Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfxvrdmv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE