Static task
static1
Behavioral task
behavioral1
Sample
a7cb4e1f7670d76797dfafc43d660796_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
a7cb4e1f7670d76797dfafc43d660796_JaffaCakes118
-
Size
729KB
-
MD5
a7cb4e1f7670d76797dfafc43d660796
-
SHA1
7be7733a4b0d0dc5d999ef584fc08f7d92b84335
-
SHA256
062e409afc0976442ed707403116a0250e3de12395d4738f9974b6aace8d5aff
-
SHA512
3834e8fd2f937dd2fd104d64747ffa32c6ac216e89a7c42dfce95f6cff5a2c0c67a43d7cefcb64952db1fb67bb616faed785b13e5494ec86832737c8769ce6a5
-
SSDEEP
12288:KMGMGm3PRfXWLcm/bbqd+FlbLdDJa4fdhO+bx6XJQNTd10TzDyErKAUxr:F/Re4mjjBL3a8a+9/D1OprK1x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7cb4e1f7670d76797dfafc43d660796_JaffaCakes118
Files
-
a7cb4e1f7670d76797dfafc43d660796_JaffaCakes118.exe windows:4 windows x86 arch:x86
94dc2d736654d21e365515e02107072c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
Sections
Size: 49KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qktxwdig Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
suljmbec Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE