Static task
static1
Behavioral task
behavioral1
Sample
66444cfc10172ca8d5d5011a12e6e192_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66444cfc10172ca8d5d5011a12e6e192_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66444cfc10172ca8d5d5011a12e6e192_JaffaCakes118
-
Size
682KB
-
MD5
66444cfc10172ca8d5d5011a12e6e192
-
SHA1
da294f48199b4de8bd870ef3b4fda11753850076
-
SHA256
58cef2fde41a924008d498c8ae51042655f3ae56b7944087e75e9630dec2109b
-
SHA512
dd6fbbb1f12f845b73509c594191fa3176f53bc922ed6f725beefb345995a0c4926f615a8d5cfed7972bb3e1f80233d4402e1c7750c2007558059427fc8ff68c
-
SSDEEP
12288:LuG5H2lyITwq1+7qoQlZVmSMnasnlXRRlUEQR49tujWzNfV56OpPY7DMyOG:CC2kIkioQ8Z9lX/GD1chV5f4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66444cfc10172ca8d5d5011a12e6e192_JaffaCakes118
Files
-
66444cfc10172ca8d5d5011a12e6e192_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 19KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mnnamnja Size: 657KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jxoxernk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE