Static task
static1
Behavioral task
behavioral1
Sample
640c7bae12ab88da6000ca455ad9e79e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
640c7bae12ab88da6000ca455ad9e79e_JaffaCakes118
-
Size
2.2MB
-
MD5
640c7bae12ab88da6000ca455ad9e79e
-
SHA1
c0a976efd13bdb308dfa3ab2715c4974da20fc2f
-
SHA256
a9198ed600f8379abd0f52caf788d0c41fe2558b0f6be230e11db3b91c1f01b7
-
SHA512
48f129bfc6e3f5819b55ccd7ab088c4c1eec8439a640878239a184d6331ce8a643b5c3a063342286fdf5cd267c5d98a2d43b4562fe9e94631cc0db74949ab2d6
-
SSDEEP
49152:F/ilmjujqZ79djmmBYpA31IY4LlPe7nPZMeY/:F/g1u79dqmBYpyIYQ4ueY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 640c7bae12ab88da6000ca455ad9e79e_JaffaCakes118
Files
-
640c7bae12ab88da6000ca455ad9e79e_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.5MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 955B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fqkdggit Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rpsuqcly Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE