Static task
static1
Behavioral task
behavioral1
Sample
6517e47e1dd508645e880a7c818de478_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6517e47e1dd508645e880a7c818de478_JaffaCakes118
-
Size
151KB
-
MD5
6517e47e1dd508645e880a7c818de478
-
SHA1
718c6576a005cb57b3fda8e024ef8a4d47d7acba
-
SHA256
95d62bd56c538c91d04764ba470fddc9da26676efae6c831b99543bd2159bcb4
-
SHA512
df4e8dcec1d14afdb0a28061eca1f9bcec6f7e33444b1ac0bb32932b2327f496a3cd53c4b9748709ef7bb014e50a87914bc007fdb66cdb451fc635680bcabee8
-
SSDEEP
3072:i8ES7sHy5/EyJ5AMzleCCfMQrNEMnS+SZZZMZ0:i//yEEAsCMQ51nS+PO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6517e47e1dd508645e880a7c818de478_JaffaCakes118
Files
-
6517e47e1dd508645e880a7c818de478_JaffaCakes118.exe windows:4 windows x86 arch:x86
a1941f71e0d20477fd184c3c4dcc8bcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
shfolder
SHGetFolderPathA
user32
wsprintfA
shell32
ShellExecuteA
Sections
.PACKMAN Size: - Virtual size: 193KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 151KB - Virtual size: 151KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE