Static task
static1
Behavioral task
behavioral1
Sample
fd5234639e7140475bf79e48e9a31da1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fd5234639e7140475bf79e48e9a31da1_JaffaCakes118
-
Size
1.3MB
-
MD5
fd5234639e7140475bf79e48e9a31da1
-
SHA1
68011e27c0560460e1ce2c79fbbfd18536885361
-
SHA256
75318fcc0b5029f857c8da28f58b92e4d997f32d678cdf1ec744c6a34f7ecf89
-
SHA512
bb19fd4f71bf693377c6d7612ddc0557e650a6835d0acca7a3910842c570c440cfff2f78e87a31055c546aa818e8522204f1ae5146a3b822ef36bcd39e9f1ea1
-
SSDEEP
24576:SrY9uiXCZEmH+AoNRx0Dz3QEZ3Ipm8BvQ+F+NWDpYtxrRLdPtNO:6iXC6mHRHQuO1InWDGtxrRJtk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd5234639e7140475bf79e48e9a31da1_JaffaCakes118
Files
-
fd5234639e7140475bf79e48e9a31da1_JaffaCakes118.exe windows:4 windows x86 arch:x86
35a9e9974c673669c35cafffdf20e1bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
Sections
Size: 667KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xbnggaux Size: 624KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ohxfjtes Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE