Static task
static1
Behavioral task
behavioral1
Sample
7328665c5847eb4c0b65d8c5d71bf591_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
7328665c5847eb4c0b65d8c5d71bf591_JaffaCakes118
-
Size
2.0MB
-
MD5
7328665c5847eb4c0b65d8c5d71bf591
-
SHA1
b664f3b6ebf330418c0e72a868118c4910d3eb37
-
SHA256
973bd8696fceab9a253554d5ed5051b6a380f575c2eba75c8d7631a1a241417c
-
SHA512
4e81117dc6454d5c87443ed636c1aa1bb288e1b522e653fe9617f70c7c1f0e1b81b657076cb207890823eb091e41532a98c5251636a89a097927ddbd3e626b34
-
SSDEEP
49152:bCM/I7r4ZmcKIWnHV9H4EkKV+v8T28BEyEN:bT/K5cbWn19HCnv0BEN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7328665c5847eb4c0b65d8c5d71bf591_JaffaCakes118
Files
-
7328665c5847eb4c0b65d8c5d71bf591_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 121.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phmkdnzl Size: 786KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sxopqatg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE