Static task
static1
Behavioral task
behavioral1
Sample
0b56541a55adfbe551079051753f3c13_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0b56541a55adfbe551079051753f3c13_JaffaCakes118
-
Size
856KB
-
MD5
0b56541a55adfbe551079051753f3c13
-
SHA1
23bf1eecf4fa6db9945c9b3c1253edcaccaa5659
-
SHA256
cad34411523bfdd0cdfe881307f8ebc0f6036c47fe83510396b5e20346476f99
-
SHA512
0c1945880e621e8a43fe9c2a670fe2fb6171ae1c3186526f78334333f212bbe71cd445d338cb582021c1c12c7b131391d66b398911ec1bfb1d9b4ca3934fa71e
-
SSDEEP
24576:qel+unjYaQgazQ4h1ZE/IBLMeCSEWVQ488Ld:Dl+unEIw2/IBLMsQ4dLd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b56541a55adfbe551079051753f3c13_JaffaCakes118
Files
-
0b56541a55adfbe551079051753f3c13_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 60KB - Virtual size: 91.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
umykcuee Size: 776KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ozofgzml Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE