Static task
static1
Behavioral task
behavioral1
Sample
0443c329d3a9b56d95e1694f4fab17ce_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0443c329d3a9b56d95e1694f4fab17ce_JaffaCakes118
-
Size
2.0MB
-
MD5
0443c329d3a9b56d95e1694f4fab17ce
-
SHA1
a762e3261a84f20abb5340fc39f7b9cd94cdc726
-
SHA256
adda76bdfb95798f3256313c4d0d025172d6893d88978ec4371ebe34c89f9476
-
SHA512
6c7d4d0c293aac21006a4489e810c62a3119b73bba7ce6ba3b89769e172eff26e0d969d9633c32d1693bb5dc030e7d717b0526f5bbacb1af669d05eed343f1fa
-
SSDEEP
49152:a9OJh5nifS2aZttwpTNKJEBPjVb5kh9x7RzhmVmouMhe3:a9OJh5L2KtxJol5MFzaTTI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0443c329d3a9b56d95e1694f4fab17ce_JaffaCakes118
Files
-
0443c329d3a9b56d95e1694f4fab17ce_JaffaCakes118.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 34KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mrqyheur Size: 660KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phwresxu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE