Static task
static1
Behavioral task
behavioral1
Sample
c856456ae5e1d253232805413cd0fc52_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c856456ae5e1d253232805413cd0fc52_JaffaCakes118
-
Size
738KB
-
MD5
c856456ae5e1d253232805413cd0fc52
-
SHA1
9215d041278e6a331b5f017befa73c0a945513f4
-
SHA256
1abecb2b80daae03b5c4d05eeeaead8b3f7e9f85c18db61a7b38cafde3d54bd1
-
SHA512
7ceb9df9ae8baef508134ee53a190eaa51a38cf07e772e031dc2364b2270cdb260d32cd2bc79d84fd0903c8d3545588e34e4fc865d1abefe1d4f5f94ff201781
-
SSDEEP
12288:CNI4l2uVSU4Jc5EuMhAhEf9RBSKuHNd3LDtbc9OogV5deLmE6J4fWxYdR:C5PCqGhOhEVPduHrJc9OXp2fWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c856456ae5e1d253232805413cd0fc52_JaffaCakes118
Files
-
c856456ae5e1d253232805413cd0fc52_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 59KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hjigtfjd Size: 667KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mufskxbl Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE