Static task
static1
Behavioral task
behavioral1
Sample
84ccd8411ec854787fa77aba6d078e4f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
84ccd8411ec854787fa77aba6d078e4f_JaffaCakes118
-
Size
2.3MB
-
MD5
84ccd8411ec854787fa77aba6d078e4f
-
SHA1
adcb2fa051ddaa11553b01de4e2fa4fe89d77fa4
-
SHA256
aefaeb89f39b86de666fb0242aa4e3c8b8b18397be1823a5e32da0e3b3b42682
-
SHA512
90e67beba70814650de5e2c5783e4a9cafd405236a56bced8f258309d6e9e39bf4085c7143871f64dc28bbaca6cb0c67842e3cb9dd20733cd4dd5aec51b003a7
-
SSDEEP
49152:7etArkX0NCtZ5i9I2dnfowDjSxjkVSuqau30BLmZE02/LSnFu:7ekDCtZ5i95ow6jZFau6l02jgY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84ccd8411ec854787fa77aba6d078e4f_JaffaCakes118
Files
-
84ccd8411ec854787fa77aba6d078e4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1e9998745df82818b92e921a2a75e35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetVersionExA
HeapAlloc
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetCurrentThreadId
GetCommandLineA
HeapFree
FreeLibrary
user32
MessageBoxA
imm32
ImmSetCompositionWindow
comctl32
ImageList_EndDrag
Sections
Size: 551KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyorxect Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mwpxzwzs Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE