Static task
static1
Behavioral task
behavioral1
Sample
f6cd42538d4f52a0d8d86d2aa48e81be_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6cd42538d4f52a0d8d86d2aa48e81be_JaffaCakes118
-
Size
990KB
-
MD5
f6cd42538d4f52a0d8d86d2aa48e81be
-
SHA1
6078af5920bca220cd64aeb3bee3cfde56a5c011
-
SHA256
0472ecf82a40581efee36f6581b82b0fc030ee1c9aa94bd3f99b3460b98675a3
-
SHA512
171f9a03330d5fca26b623f6eaaad4bafa62cce3f785e11b12540c701bc14026d7769a15cf4da005815c7b3b9df9ff37adc66f4b27339dda00817abedfb818fb
-
SSDEEP
24576:4cxiSd7W1lmHWOhPT1jsEnkScQa/+k5ihwXJzGRn1g:4qhW1WbPSUWH7HJana
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6cd42538d4f52a0d8d86d2aa48e81be_JaffaCakes118
Files
-
f6cd42538d4f52a0d8d86d2aa48e81be_JaffaCakes118.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 262KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xbqfcues Size: 711KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wvpgnkip Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE