Static task
static1
Behavioral task
behavioral1
Sample
b657a5debfd2d73d1c5c5ef8c7cbffc5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b657a5debfd2d73d1c5c5ef8c7cbffc5_JaffaCakes118
-
Size
760KB
-
MD5
b657a5debfd2d73d1c5c5ef8c7cbffc5
-
SHA1
c7de661fb86c56cd7aedcad5c928c1edb28acbac
-
SHA256
6c36596ebacd6cd8be24352ab6066020210a98a2154f73bb0dd6a302d931b6d8
-
SHA512
bd7fa2e2a268fd3c74fcf2976ddb4f064fadab875028d8da9b314814a57e1eebe185fc0259713a888cf0092932055351b15d0b8d388a3efd30ea212727f4c486
-
SSDEEP
12288:trYNHMlxcLVZxL1QZ+zxBh6OFV44PCCO1M9EaNGrq/fiv82bqjnILb92sJmNZAik:trwH3LfxpQMzxBhj/CDMd6qG8aqjn2Xc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b657a5debfd2d73d1c5c5ef8c7cbffc5_JaffaCakes118
Files
-
b657a5debfd2d73d1c5c5ef8c7cbffc5_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 168KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cvzbgymq Size: 581KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ecvpdpgf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE