Static task
static1
Behavioral task
behavioral1
Sample
fb40d76adfe66d64a8e4580a91398aa9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb40d76adfe66d64a8e4580a91398aa9_JaffaCakes118
-
Size
750KB
-
MD5
fb40d76adfe66d64a8e4580a91398aa9
-
SHA1
970dc4efa18cf9abf3216d47fb597266439f070f
-
SHA256
99065a025d3b3055d54a5c3460aff68bc4e3a4086424e63a16a15c11d6bd1761
-
SHA512
1fa524530bcf1c89035907e1e45cd83363a5dea12ed424e3e3be68568a82df994b77f4176e39c8f1e5355179ea20aa1642185e24a2c5d9c8b2a5673d20447a98
-
SSDEEP
12288:Z8jzsY76qVAfPsSX8ni4SnVz2FpksCy/N2g0crkYECgHFiqDKL+fKo:mzKqVqwfSnVz2DtCE0mbEbHsqeL+l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb40d76adfe66d64a8e4580a91398aa9_JaffaCakes118
Files
-
fb40d76adfe66d64a8e4580a91398aa9_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 53KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
naqozrlg Size: 688KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xcgfexix Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE