Static task
static1
Behavioral task
behavioral1
Sample
cfe5e9ea8cbb1cba6bcf7ac9f0c210f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfe5e9ea8cbb1cba6bcf7ac9f0c210f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfe5e9ea8cbb1cba6bcf7ac9f0c210f9_JaffaCakes118
-
Size
814KB
-
MD5
cfe5e9ea8cbb1cba6bcf7ac9f0c210f9
-
SHA1
6b580f9575863652a84eb459ec2648d43e59d0f6
-
SHA256
4a1f0941aba6cf27f878c35f13a162bf2e99fc1e2b509776ca1d6763fb023946
-
SHA512
613ec321819847deb41f0775229a5d7937cc4474acc82d8c759460cb016a75e12eb96576a9f3a651826f0a06b682e6b3e8c5fddc99e00dcb7aa348119e0eee73
-
SSDEEP
24576:nquxc0VMiO7/QfUO2C8I0VOh+jAVXoljLdGkzTbxteoKJm:n/xc0Ub3LS88ScqTnF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfe5e9ea8cbb1cba6bcf7ac9f0c210f9_JaffaCakes118
Files
-
cfe5e9ea8cbb1cba6bcf7ac9f0c210f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 164KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ctkbibsd Size: 634KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
djvcmxvx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE