Static task
static1
Behavioral task
behavioral1
Sample
a78685fe30670981ef93b8b3e7f736be_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a78685fe30670981ef93b8b3e7f736be_JaffaCakes118
-
Size
2.8MB
-
MD5
a78685fe30670981ef93b8b3e7f736be
-
SHA1
60ca737c04f7d311db29bdadeb4c0b71580b077d
-
SHA256
d37f84750532f65221153400de9c0d8b1c8627686c965aea9d1e15b5f3cc08c0
-
SHA512
4eb314f63bc88b195aae933cd3b3892a9b4e5a2a4dee7ab5e41ffcf8b9d2eb845ddc83173a5003843af5929299d8912c0497b6632752669ac094d44d7d615d09
-
SSDEEP
49152:1apVRFpWukhhySECArpLw25ECDjL1UnLTzXDPytVhHmRTOZv66YdhD:YR3WPmPhRbKLTzTsmw6DfD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a78685fe30670981ef93b8b3e7f736be_JaffaCakes118
Files
-
a78685fe30670981ef93b8b3e7f736be_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
gzrnkjgi Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cmsfxjpb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ldpfqzxn Size: 640KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lgycyyhh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE