Static task
static1
Behavioral task
behavioral1
Sample
85e168ed3562a89429d88c0b76bcd9cd_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
85e168ed3562a89429d88c0b76bcd9cd_JaffaCakes118
-
Size
1.9MB
-
MD5
85e168ed3562a89429d88c0b76bcd9cd
-
SHA1
6b78fd02073bcf24adcfd5f9a891bc016f6a8fee
-
SHA256
6ca77e18f96bf93dd86fdcfe9ace7521cf998506ed027d4c7c24414a39419fdb
-
SHA512
a25d4b4d19430a1e9370c0e2d450bd13dc89fd7c1dfab85eb100a72104c8c35b4fda68f02857c2849d7405cefdfd57a4fa6c23efafadc576de6f94af68df7fe3
-
SSDEEP
49152:U9qISFqexZv9s77sSCIIe4jQbtz1g6FA:3BB1SgQJzxC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85e168ed3562a89429d88c0b76bcd9cd_JaffaCakes118
Files
-
85e168ed3562a89429d88c0b76bcd9cd_JaffaCakes118.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 35KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rvcoktcq Size: 777KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ilcgzkdh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE