Static task
static1
Behavioral task
behavioral1
Sample
d0d11a4c1b68c8729e94f49184db4f53_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0d11a4c1b68c8729e94f49184db4f53_JaffaCakes118
-
Size
1.3MB
-
MD5
d0d11a4c1b68c8729e94f49184db4f53
-
SHA1
16fe72ddf841afe0951da85d3939413253ead902
-
SHA256
cccd88249613a3c3e229b762c64cbda8d5681aed58b50f415c96a972ac0d25eb
-
SHA512
040edd0092285617a1d947a7be797015697c099990c598879ae114280edd92165ef4cdc947f98fea4331b9efd712790f7f72affce28eb657908d8bffcf50b152
-
SSDEEP
24576:a6RnufVuuC1YEddHCFHwaeGUbMKxgMygWL5HQht1WL1P2op:atcnuEdd5ajUbMKGYt1WL1P2op
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d11a4c1b68c8729e94f49184db4f53_JaffaCakes118
Files
-
d0d11a4c1b68c8729e94f49184db4f53_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 108KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
smwqcdmk Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idmiwfbk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE