Static task
static1
Behavioral task
behavioral1
Sample
e136bd9ce389f8c8cfa4cd90a2139fd2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e136bd9ce389f8c8cfa4cd90a2139fd2_JaffaCakes118
-
Size
1.1MB
-
MD5
e136bd9ce389f8c8cfa4cd90a2139fd2
-
SHA1
9cc82d5a1a034aed35d2385634d69b12ad3d3fea
-
SHA256
e4fe5a90d09fcedcc5343f99afcea1b3c999533900eefc9c8b38540d2b74f51f
-
SHA512
cf8f07b6187fe00811553236830ff70267e4b8e443cf68b8e4b8110db6586e572d5903efd0b37a4f960db02f9c8638ccfcb480ed488165673b820b1f29c2e7d6
-
SSDEEP
24576:wySbGOWtj3Cqr58CS7p7H7sgvwb7JZH76/2pLGWoq:wxej3Cc8CCwgvwf/HZ7oq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e136bd9ce389f8c8cfa4cd90a2139fd2_JaffaCakes118
Files
-
e136bd9ce389f8c8cfa4cd90a2139fd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 420KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
whujeevp Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdhczwzv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE