Static task
static1
Behavioral task
behavioral1
Sample
9419ee4ef3337a61b5f7a0a3949d2a8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9419ee4ef3337a61b5f7a0a3949d2a8d_JaffaCakes118
-
Size
6.5MB
-
MD5
9419ee4ef3337a61b5f7a0a3949d2a8d
-
SHA1
04988d7cb660cab4ea2d8c01deae8559a8f11532
-
SHA256
1f74b7fcaec2411cd90a37b98550fc7e37016fe3ce84a169a859588eda4cbc21
-
SHA512
58a3308f62e73de811bebcafa66bf0d153773ea948044af3312ad1f70e466d2b1ba00cce29437be5cb1289a3f2d291c036f2d579c6c8512fbe940adbe8be77a3
-
SSDEEP
98304:NyrC8gMtKbCXjn9IQX5uGiylK8p/DaCO0Y54WxTIln+HTocMxJa67EANewDbXwll:N2C8gHbCXZ3XQsKIanF0n3uQXbqIK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9419ee4ef3337a61b5f7a0a3949d2a8d_JaffaCakes118
Files
-
9419ee4ef3337a61b5f7a0a3949d2a8d_JaffaCakes118.exe windows:10 windows x64 arch:x64
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 20KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kltkbdwo Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kpmvbhey Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE