Static task
static1
Behavioral task
behavioral1
Sample
7e1248e1bf6e55db50994e9db2068e33_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
7e1248e1bf6e55db50994e9db2068e33_JaffaCakes118
-
Size
2.5MB
-
MD5
7e1248e1bf6e55db50994e9db2068e33
-
SHA1
4165df8ddcccf6f44c758757e8f0bf9f8bba3544
-
SHA256
78f0ece4ea65947d76d9035ec0a8fd7089fce7cb41f50e33e085eacfdd5c001a
-
SHA512
119f21e73416564c4a59046799215d210170b79c02bcb01504d25d04fcbd4b989bd09d55a0396eccd0d1027fdcd60e0eb2087e5bb5854730b02f8699c289e503
-
SSDEEP
49152:TwtJ0i/cgvnpUlLif3hAmaL5ZtQV803MJAoYvT94g6pvA3G7k:8tN/cCnpUlufGtQ3MJAoET0pvA3G7k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7e1248e1bf6e55db50994e9db2068e33_JaffaCakes118
Files
-
7e1248e1bf6e55db50994e9db2068e33_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 163KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 422KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
thtzqsvw Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
okhgquyp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE