Static task
static1
Behavioral task
behavioral1
Sample
6fe6b624db9ee2311976b79b6192bde8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fe6b624db9ee2311976b79b6192bde8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
6fe6b624db9ee2311976b79b6192bde8_JaffaCakes118
-
Size
29KB
-
MD5
6fe6b624db9ee2311976b79b6192bde8
-
SHA1
f590cc0ca6c23923eaa24f1646fa3871fa05ee57
-
SHA256
7fcb94274d25c7dd8ee8702a834f4010c118d958b02d99fc923f383bdb90586c
-
SHA512
2c71166dc306ab667f546025994082278f287258769d57e3177c9d03da01b81b898d65b7cbc66d4ca30f84e0a02b1a4bd6df68b6802ba240fddcd69accbee589
-
SSDEEP
768:AfDWgegRP7DrOUmcNTCsjC/ZG5lJCWwysmm:1gesPrOUZzG/2hMd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe6b624db9ee2311976b79b6192bde8_JaffaCakes118
Files
-
6fe6b624db9ee2311976b79b6192bde8_JaffaCakes118.exe windows:5 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 25KB - Virtual size: 87.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE