Static task
static1
Behavioral task
behavioral1
Sample
657d23a710e0d2c2cf05915a188c0799_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
657d23a710e0d2c2cf05915a188c0799_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
657d23a710e0d2c2cf05915a188c0799_JaffaCakes118
-
Size
570KB
-
MD5
657d23a710e0d2c2cf05915a188c0799
-
SHA1
9b2c7dcc914bbf007e1b8a60631929bbc3672d8d
-
SHA256
30ec7dae6924bfd6fec1fd6ea65a03a367126e6c4cf5a657c07e7b493e19d2d6
-
SHA512
71d09b62f13a883b5dbf6c5ed898e38536e478842c14609f1201e273133add3ed733fd15b49a34541453aa597c9ee7d44bf7eebe627529b7f1ece5aa1fb9a8a0
-
SSDEEP
12288:KzahJViTIBtTR60Sbifnmeb6A+Q5j/HITGq4g/D0EwNzchOKc3T:Kzd0VDSGPzIQ5j/HITG4r0T5chOKO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 657d23a710e0d2c2cf05915a188c0799_JaffaCakes118
Files
-
657d23a710e0d2c2cf05915a188c0799_JaffaCakes118.exe windows:4 windows x86 arch:x86
f4d2b8bcc4513fb66ff8499c077b614d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
Sections
Size: 34KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ickybops Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
laabgkwo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE