Static task
static1
Behavioral task
behavioral1
Sample
6d8d2f801d7409494307d83a85d7af5b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6d8d2f801d7409494307d83a85d7af5b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6d8d2f801d7409494307d83a85d7af5b_JaffaCakes118
-
Size
37KB
-
MD5
6d8d2f801d7409494307d83a85d7af5b
-
SHA1
20882eef5d99123f353df9f367e80383624cb055
-
SHA256
3c710780dc8b38adc0657632403a2dee7c8b71cbc06df41d36ab790da4552ed9
-
SHA512
af6adc8fa77e27d2c8af1ee8ad869743fa26f3b2e70d95617edfe7f23a44efd56b8eacdbc23641ffadcc3f638eecc64aa4c1c8f9c3ca65fa4bf2372b89a96e42
-
SSDEEP
768:I+bLtp2SXQpma0EQXjVO5NPnrc/mLDQ2wbuOpSDOmWkN7lv+5Oth77D:I6LX2uNOPZLDQ2WN2TJpWUt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d8d2f801d7409494307d83a85d7af5b_JaffaCakes118
Files
-
6d8d2f801d7409494307d83a85d7af5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
a547af1b9ed7ba712c6e536d74797cd1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
cygwin1
exit
cygintl-8
libintl_gettext
cyggcc_s-1
__divdi3
Sections
.MPRESS1 Size: 33KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE