Static task
static1
Behavioral task
behavioral1
Sample
a741b91236ba36876f4a0a52214b1579_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a741b91236ba36876f4a0a52214b1579_JaffaCakes118
-
Size
832KB
-
MD5
a741b91236ba36876f4a0a52214b1579
-
SHA1
2913d14c651a360a279c74209d691ac1ac0c2d2a
-
SHA256
bc8c24b594bf45a3b1826546f41173a9af27aeee49a0c45372436b917d4ed402
-
SHA512
abac829ecdc663bfd0d0f0a32220c1a0b96b6e41a02480910140c2d971abe1c9951cd6d1637d7ba8920ab5b6b38eb86c0d8232ab70f373d356decc1b48cadefb
-
SSDEEP
12288:uEtUr9o0WRMk/3mOTg6ntFnRcyGTOrVlOMDj8C2Ika3i0i/eEiOwo+7H/jjZuB75:uxxo7RMGWOT7tFiAlOMXaoDbjIJwA1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a741b91236ba36876f4a0a52214b1579_JaffaCakes118
Files
-
a741b91236ba36876f4a0a52214b1579_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf1ac19e064ab24b68e7b67cadeeb289
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
Sections
Size: 228KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ynxtvtxd Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tlwxvvkx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE