Static task
static1
Behavioral task
behavioral1
Sample
b778c26e03b4fdc89e6dc6addbc5ec9b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b778c26e03b4fdc89e6dc6addbc5ec9b_JaffaCakes118
-
Size
1.3MB
-
MD5
b778c26e03b4fdc89e6dc6addbc5ec9b
-
SHA1
cf3bbf3e0b9878f4ee854895135abd7ae791b95b
-
SHA256
5ce8585c47f963d9becfde39e14fcd3de914585d67e02ac8af7260ebfd6fc235
-
SHA512
ceee8508a7615c0008096f78d7d27c7e4a21ea3718ab45b0a7f2d0dfad86d5e127b433cdd0d3db8434240c12c0bae99ad46c6c6f27598630cbc80ee876ebce60
-
SSDEEP
24576:DElY4Ry9D9H6nNEnJa2KFm3LGZ/UHjnQMiUB4jObYMvbW/TWtXgBg9bJm:DEq4RO16NMDSZ/y+UB4qbzv0TWtXV4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b778c26e03b4fdc89e6dc6addbc5ec9b_JaffaCakes118
Files
-
b778c26e03b4fdc89e6dc6addbc5ec9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 492KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqxieiie Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmgrtogv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE