Static task
static1
Behavioral task
behavioral1
Sample
de24737981da171fb24ea3bf3fa45a56_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
de24737981da171fb24ea3bf3fa45a56_JaffaCakes118
-
Size
4.9MB
-
MD5
de24737981da171fb24ea3bf3fa45a56
-
SHA1
112fa6fad666d4ef160ad07b5a3dfb5d6319ee3e
-
SHA256
a42e10b6ce1cf0e6da28de1b7df85388ee993ce553c9a346291b8c4243108494
-
SHA512
7c91b577b80e679961c43061be1572fec7dd9413ddbef506f1b7e39409a426da2d00937e44a11125f71632d85254ca821b1b6ae84f42753799899978b3612e97
-
SSDEEP
98304:pkLhNqR/1rHmKRsvw74u1ZccgdG7HQS8E3FjyUmL0B92x:aLrq9VmKRwwRZLgdGbQYV+UmLjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de24737981da171fb24ea3bf3fa45a56_JaffaCakes118
Files
-
de24737981da171fb24ea3bf3fa45a56_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bhnzdfpw Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mooecgvh Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE