Static task
static1
Behavioral task
behavioral1
Sample
d459eaa6312ef7f112f590171dd9cc96_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d459eaa6312ef7f112f590171dd9cc96_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d459eaa6312ef7f112f590171dd9cc96_JaffaCakes118
-
Size
1.5MB
-
MD5
d459eaa6312ef7f112f590171dd9cc96
-
SHA1
18a5c3f34549038ef6cef72ba3d1d975bffedacd
-
SHA256
d668c5c95b7c9d541bef4e65559f97fa5f89cf26511302ef508b019686ddeb90
-
SHA512
0de8c84dc461561acb771faad3c07e0955c50398b80799a47a062ce3dced2fb54dafa1cb51b70f41b056305627f4ee30bebc0e21ac70e9070848294206bb7e62
-
SSDEEP
24576:QekKiRQpAktDsOFa9eTkEXOZujtdKrkX3jE3v9MTbSKG6IReTrODZ2CUYI9SxUeq:Vk98DsOAeTrssE/9MTtOoSv+heq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d459eaa6312ef7f112f590171dd9cc96_JaffaCakes118
Files
-
d459eaa6312ef7f112f590171dd9cc96_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 310KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 430KB - Virtual size: 721KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ctontfhi Size: 790KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hezrnxhg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE