Static task
static1
Behavioral task
behavioral1
Sample
03161d4517927cdd39000de00cc93a81_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
03161d4517927cdd39000de00cc93a81_JaffaCakes118
-
Size
1.1MB
-
MD5
03161d4517927cdd39000de00cc93a81
-
SHA1
2d156d39d405106ac79646e35f020af124bef8b6
-
SHA256
b866137462db88d084dc2dcd5a1e127a357b01a58cd4e48591e4b426ffe7b44e
-
SHA512
ac261aa110659049abb7f033399cf21053c01a32796fee881c22a6586bf9e537545ce5dc88a7cb4eee68f2804ccc41a143259738ba1a91183e4a35c0431006e1
-
SSDEEP
24576:KKxcjN8N9kdlPGeTx9KRmJxSGSp41KIsps8I4reXr:hIe9WluwzxStp6KImLI4reb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03161d4517927cdd39000de00cc93a81_JaffaCakes118
Files
-
03161d4517927cdd39000de00cc93a81_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 416KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dtmiqxta Size: 676KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqkuaflz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE