Static task
static1
Behavioral task
behavioral1
Sample
f6115b2fbab76b9373d4612f51512377_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6115b2fbab76b9373d4612f51512377_JaffaCakes118
-
Size
900KB
-
MD5
f6115b2fbab76b9373d4612f51512377
-
SHA1
7644a6cbeefdfb36747f98004fd0f46f3d62e21c
-
SHA256
da943b0da06a17c4fb5ce5d719844a0c1e686ce41f3d91009448d9f0042e91c9
-
SHA512
7fb4dd6dc321d08bb7291d194b33f0ce1f53e11c1785961b02379c19f71a5545e5fd37e6293bb8a673a093ba9c4deea8c6d5ee3f00ffa8279139007cef237e96
-
SSDEEP
24576:zpEDzRCXCAR5RnLHl9CpwPjkQurPi2c9a1:zcRSTLF9VDNna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6115b2fbab76b9373d4612f51512377_JaffaCakes118
Files
-
f6115b2fbab76b9373d4612f51512377_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3.0MB
.engine Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: 217KB - Virtual size: 220KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vypwpgcl Size: 622KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
umphefhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE