Static task
static1
Behavioral task
behavioral1
Sample
d2b63bef1d295e3677cc259ebbdabb6b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2b63bef1d295e3677cc259ebbdabb6b_JaffaCakes118
-
Size
1.5MB
-
MD5
d2b63bef1d295e3677cc259ebbdabb6b
-
SHA1
9067219f9da03328a69692795b8673bef42fe1eb
-
SHA256
0a15e3b8341e9d2c04a157789dc52364d90f960b7ab9ea66bbaf4da026cef906
-
SHA512
24f563da69a04adf40ccfc9a3527f42be7754a9a4c3d072c39b0c9013ae96b3408e76dfd90967b5f8de611a575883b3339e0eefaea16f7337a8528dfb8540b7f
-
SSDEEP
24576:/xYkednZY1lMKLnsIRyIIHul09ChUOB+VdnU5W4HpLs5h4RTtj9bhvhtk+/BCvVV:/xiVG1ldsdH5ChnB+VxUbZskRTtj/M+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2b63bef1d295e3677cc259ebbdabb6b_JaffaCakes118
Files
-
d2b63bef1d295e3677cc259ebbdabb6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 334KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qlqlughv Size: 875KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjkwxjku Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE