Static task
static1
Behavioral task
behavioral1
Sample
b6f86cdb55b473ce78e80cc5e3120fd0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b6f86cdb55b473ce78e80cc5e3120fd0_JaffaCakes118
-
Size
1.1MB
-
MD5
b6f86cdb55b473ce78e80cc5e3120fd0
-
SHA1
e510b21af646594934a26a883e984c42bac23812
-
SHA256
0b8b45ffd88a53e75afaae6eb97b829e5d7e0e7643e552772aea53e6a0b909a6
-
SHA512
d6878a6e599e66ad1c4af56f1fb4b5dcb33bfd7d825be24155704ba1b72d3d098e41bbea2fe7df28bca224c9a5e4736fd13c3c28e1d14f564375b74a91d392da
-
SSDEEP
24576:EhQyqsD7N+VdZ8Hgj5SqFICYo4dZqlCJ6wMweV/1GcY0PrdrQE6A:Ehl3D7N+gIYJdIDtOE6A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6f86cdb55b473ce78e80cc5e3120fd0_JaffaCakes118
Files
-
b6f86cdb55b473ce78e80cc5e3120fd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 243KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
boyuteio Size: 729KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zgpdolnp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE