Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8833645a44f45ba3dd4eaa80c50cf61b.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_8833645a44f45ba3dd4eaa80c50cf61b
-
Size
975KB
-
MD5
8833645a44f45ba3dd4eaa80c50cf61b
-
SHA1
596a1799f0102fc25b188bde8066cf96b61c6bfb
-
SHA256
cd645e98bf8c2597668c9ea6ff53e2dc1eb998231ccc609ba2af9a0a3ebffad0
-
SHA512
f32fe5035f5be1afca87222b05f524d11ab7ea0099291f33348e5a7da21227b4b43e68915b9e45a7d1000197b8637ed9623d0d21a03b893c913985552395f6e2
-
SSDEEP
12288:NPSDah2JhU3N0mBcEe78NjwMcRTtkqi98zmXY653/U4bfi4wkV702K2a8UlOr+p4:Jg0eyBBhRkTtr5MVPUEwkC2KV8Uu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8833645a44f45ba3dd4eaa80c50cf61b
Files
-
JaffaCakes118_8833645a44f45ba3dd4eaa80c50cf61b.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 313KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dzsrarvi Size: 634KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qxkdmxhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE