Static task
static1
Behavioral task
behavioral1
Sample
04df8e70f8b15497b353175fac198c42_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
04df8e70f8b15497b353175fac198c42_JaffaCakes118
-
Size
968KB
-
MD5
04df8e70f8b15497b353175fac198c42
-
SHA1
ff3986c3acfb42fc2a21360a34c0b3c1b3e99eb1
-
SHA256
83f917cf25deea204e385a1c695728c2ec89b38279cb1a6acc8294872535516a
-
SHA512
f3a7801f73d061dc631ada95d525b45d5eeac2e3541fa9e980c17158d854129e6c5d4b9f5f227cbe756db6b56340e30df8aca574ab75e8a22e7137bafba649ba
-
SSDEEP
12288:OBP5GnQ457B6GUR8yJMyo3YOKwYbtgYeHFUsb5/iseJwS2luvfOy5Ms51TTwb:Op5GQ457Bg8U43YOKTtvSUwlunOkMym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04df8e70f8b15497b353175fac198c42_JaffaCakes118
Files
-
04df8e70f8b15497b353175fac198c42_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 28KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
caulxyvy Size: 709KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tuuwkjzv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE