Static task
static1
Behavioral task
behavioral1
Sample
b5748b3c459e61d049e21d4cf19e63f5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b5748b3c459e61d049e21d4cf19e63f5_JaffaCakes118
-
Size
3.1MB
-
MD5
b5748b3c459e61d049e21d4cf19e63f5
-
SHA1
cf28158829b584c3281b7e216834e0211ad34089
-
SHA256
30671d8991f296f570e0f0b16ee7b2efa7fe357535a4e3ed555b4e222b03bf77
-
SHA512
65a7d071469617bffe39390d3b770e49f09e242f6b4e0214acabe74e36636d4c09f4bfe5795b78c0898e7564c751de0fd3cd241f894a66d5e69c9812fea48d39
-
SSDEEP
24576:vWJPeqXdFs7swYyeFZ6YlrMX7oOnggS48OWZtdb8vaj:OJP9FWUfZ4oOngC8x6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5748b3c459e61d049e21d4cf19e63f5_JaffaCakes118
Files
-
b5748b3c459e61d049e21d4cf19e63f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 276KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tqdyslxx Size: 808KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zvtffwxa Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE