Static task
static1
Behavioral task
behavioral1
Sample
f7772238dba163f9bc66ea6681b8a1ac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f7772238dba163f9bc66ea6681b8a1ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f7772238dba163f9bc66ea6681b8a1ac_JaffaCakes118
-
Size
934KB
-
MD5
f7772238dba163f9bc66ea6681b8a1ac
-
SHA1
a8d2a4a4ec75ac47d139a2a465e54a4d240808fd
-
SHA256
fbc9717210006babbafdcb94e7dd296f78916d6d722631f5a7f57827b8f670db
-
SHA512
2844cc48d3fdb6bafc2ea11f6e343c85a4234ce2359c84f0d557f4450967c38101f8a28e745d8d1a9a63e3d3b143b35b001a4358df8a49cab2d27d39291f8537
-
SSDEEP
24576:7rKhHcy0zong9j+G55ALg7b2vtrX+9ajMqjDf7yndTAJAUr:7rKhP0zAeRkZu93weT5Ur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7772238dba163f9bc66ea6681b8a1ac_JaffaCakes118
Files
-
f7772238dba163f9bc66ea6681b8a1ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fkyjgumw Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfxvrdmv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE