Static task
static1
Behavioral task
behavioral1
Sample
06ed0f2816105137dd0d9f5dd0e59152_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06ed0f2816105137dd0d9f5dd0e59152_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06ed0f2816105137dd0d9f5dd0e59152_JaffaCakes118
-
Size
217KB
-
MD5
06ed0f2816105137dd0d9f5dd0e59152
-
SHA1
f099781087449db4bcf03eddda279a3c3b26c787
-
SHA256
788d4722e06b91b64b52e7b9166bc8ab53f3f91d204d5ef9801a64a778ffbdd8
-
SHA512
00be033ac709c0a42d0c43deb028831e4456a2e8566b7f90aa7e302d28a3d8d30f819f688211d0c9786e19dbf2f9dc1b265ff9648acaab935b29feef330f309e
-
SSDEEP
1536:zvIR6D2j8YWase80y9mrBGCiCIHSkCttaRhdsRaV2KZ4nu83lS60XLW1iiLd:YlWh41KCICttajBV2KZKtSBi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06ed0f2816105137dd0d9f5dd0e59152_JaffaCakes118
Files
-
06ed0f2816105137dd0d9f5dd0e59152_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE