Static task
static1
Behavioral task
behavioral1
Sample
a1946e4d564ddf2e6402552dadabbbac_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a1946e4d564ddf2e6402552dadabbbac_JaffaCakes118
-
Size
850KB
-
MD5
a1946e4d564ddf2e6402552dadabbbac
-
SHA1
b9bfd00d5208c5842855ed607359ad5d06a14f94
-
SHA256
1c69117c07ba472470e6a93c16c684352edae17ffc4f24b811aabad3cd3eee25
-
SHA512
3754c30b219a8009e1808c7bc4ee8f945355fb9986d52b7f23433df852c528de21f602c690b5ee11e1c0452546bdb1548e6273d72982c23777943c03cf3ec16c
-
SSDEEP
12288:fD0mQjGIRTsxt3h+z9xk2qwZFsn6LroG6249UXlchCTGi/mt7hw8PnyTXOh4cuKe:b0mDSTs3wxzo12hwCTGkm5mqvXQQ25b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1946e4d564ddf2e6402552dadabbbac_JaffaCakes118
Files
-
a1946e4d564ddf2e6402552dadabbbac_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 149KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wlwgjabk Size: 695KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ovoczequ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE