Static task
static1
Behavioral task
behavioral1
Sample
651dda9c1c2f12bec5a51df1344f5b6d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
651dda9c1c2f12bec5a51df1344f5b6d_JaffaCakes118
-
Size
2.1MB
-
MD5
651dda9c1c2f12bec5a51df1344f5b6d
-
SHA1
d5edecc40781fb1d740bd48cf332231c882407bc
-
SHA256
f50bbdcd2785aebcd03bca53cff3f7518e8a196dfdebbe6995989a332d76ba17
-
SHA512
f04f717ee7f78216aac29b162834329563fc12d9edab1dc1a379ce35d55306ed2ea10395c6ea4b68c25bcbfa1806eb3506bc3179037e90a9e03f2317bbc508f3
-
SSDEEP
49152:c9R8egZTr83JFAU/D7ct0QzPARbrsMiQoqUJH5Ax0:c9h4/85+UM0vRPsM0XY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 651dda9c1c2f12bec5a51df1344f5b6d_JaffaCakes118
Files
-
651dda9c1c2f12bec5a51df1344f5b6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heuwmoje Size: 907KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ruljspib Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE