Static task
static1
Behavioral task
behavioral1
Sample
bac9c02706e5fd5aaaaaa1e9fe2db06c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bac9c02706e5fd5aaaaaa1e9fe2db06c_JaffaCakes118
-
Size
1.4MB
-
MD5
bac9c02706e5fd5aaaaaa1e9fe2db06c
-
SHA1
07a8f008c8882390b66cf376c06b562954846b82
-
SHA256
2b6db417106b71a1d301988e8dc5ba6d323dd50227d77da17cd98b2b7c297031
-
SHA512
9728bfe55140369b110c377090df0dbc794118f2d49444e14fc9ffd52a00eed4d09dd02a5e3a4a149f50d33ce93ee84163bb7842cdcd0f45c962b2098701f727
-
SSDEEP
24576:ufnVpnleGzKZTYrVUc4UNZUZaEJh7zl+KctbTtA/BX27OFJot4axAN+eU:utXtKarVV4MZUZaEDVPrha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bac9c02706e5fd5aaaaaa1e9fe2db06c_JaffaCakes118
Files
-
bac9c02706e5fd5aaaaaa1e9fe2db06c_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c0 Size: 568KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rpjruvyc Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
umbeeimm Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE