Static task
static1
Behavioral task
behavioral1
Sample
6a00f96910b958ad9e5c3394a2b31999_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6a00f96910b958ad9e5c3394a2b31999_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
6a00f96910b958ad9e5c3394a2b31999_JaffaCakes118
-
Size
724KB
-
MD5
6a00f96910b958ad9e5c3394a2b31999
-
SHA1
927abdb2d7510b924da27ed47e00ab916ed3bd22
-
SHA256
ad9ea09ec4170fbca565125a45e530ca8f6105b4d5d48ec3a5c729af98932499
-
SHA512
9cf2531b5d7a7388449e0c91d00aeb48d505d5bc12693ba488644af1162782e31e6208338e8962641981db11912828d30a5d4694fcaaa66016c03ecb90a699cf
-
SSDEEP
12288:+SQycOwtOTKhshQ9tDxMW6yuZWLDAyiiTB/1uVSrDmA3zSKVHbQ63qm2p0Jl:tc6TKOhQ9tWyuZWfA0BUVSOA+KV7Q63z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6a00f96910b958ad9e5c3394a2b31999_JaffaCakes118
Files
-
6a00f96910b958ad9e5c3394a2b31999_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 692KB - Virtual size: 691KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ