Static task
static1
Behavioral task
behavioral1
Sample
67567902a291a02501cb6472401b5c44_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67567902a291a02501cb6472401b5c44_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67567902a291a02501cb6472401b5c44_JaffaCakes118
-
Size
1.6MB
-
MD5
67567902a291a02501cb6472401b5c44
-
SHA1
292f65ead7bdb51bb76ae735a2a2d8b64a787aa9
-
SHA256
5073b87eaa029cff179255fc1f623803edf1adb30d00dff02bc731718563c8b4
-
SHA512
e60664f4a788286f5807476a25ba686f56df4f50a6cfbd3caa830f79e8225828972bee1444fc0d5c3280695f96abe240cb25d98c2c64a305f31db09310d80525
-
SSDEEP
24576:5j9C8V6serfc2y/KlsUtJBgunufSaEeXxZhzenZqROXwElA5/sztHwF0d/uIzMT8:XZKQn/OHD2uuanExPiWgwsA5/yhFF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67567902a291a02501cb6472401b5c44_JaffaCakes118
Files
-
67567902a291a02501cb6472401b5c44_JaffaCakes118.exe windows:5 windows x86 arch:x86
67fdc237b514ec9fab9c4500917eb60f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
Sections
Size: 256KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wupjonid Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebqfjyir Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE