Static task
static1
Behavioral task
behavioral1
Sample
c799f36996eb22dd6db15b9641db9394_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c799f36996eb22dd6db15b9641db9394_JaffaCakes118
-
Size
756KB
-
MD5
c799f36996eb22dd6db15b9641db9394
-
SHA1
f3821e3268edc3b3f4f27ca7d131733f7d578143
-
SHA256
6f629d0ead8fe61e770fe5ebd2f1f5196060184b285aa0da79d57ecb231eab1a
-
SHA512
2e4b6ddc37948bc500d9bb1f37eb52e0ea7ff4d1198db2e1e0f75e8fd458805b8e6912a38d8c45b7a1ccec5ddf769395310794f0ddf2bbf63061acbae8c4b778
-
SSDEEP
12288:5oHxiGX0SWBR9tYJzD7E1m9MwVmV9zcAdm2SvAzhlamlavgy:5VtEMwQPzRd9SvlmoYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c799f36996eb22dd6db15b9641db9394_JaffaCakes118
Files
-
c799f36996eb22dd6db15b9641db9394_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 77KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jufvuuak Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
onskywug Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE