Static task
static1
Behavioral task
behavioral1
Sample
8ddebd7a50d697cb8b24b0133bfa2a2c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8ddebd7a50d697cb8b24b0133bfa2a2c_JaffaCakes118
-
Size
2.7MB
-
MD5
8ddebd7a50d697cb8b24b0133bfa2a2c
-
SHA1
a1cc21e029dda5704757d4cba189b95ecf481dff
-
SHA256
1898c9dc61e4c04827d230f665af6a7a841e941ce38a6a7e5c8e3732523e26f5
-
SHA512
4eb424c6663c4d2bdb6ea2d81e26ba265956bd37bce8825ee41c2f2da9190fbf93432e7ae645b46b51faed15c4153cd6bfce417e318fb597b733f21d678a9338
-
SSDEEP
49152:qnW1llyINfPH2sdWrUwokGoHvORGUkv3r/Ix3VMkd:qWzlNffX1YvORifrolMY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ddebd7a50d697cb8b24b0133bfa2a2c_JaffaCakes118
Files
-
8ddebd7a50d697cb8b24b0133bfa2a2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
fd0c6736b4536d21a4c5374f3b0f0905
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LocalAlloc
Sections
Size: 316KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvxlijsk Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uixpvfxm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE