Static task
static1
Behavioral task
behavioral1
Sample
6211e6b46c021cebc712c239d8b54485_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6211e6b46c021cebc712c239d8b54485_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6211e6b46c021cebc712c239d8b54485_JaffaCakes118
-
Size
54KB
-
MD5
6211e6b46c021cebc712c239d8b54485
-
SHA1
f8293aaa3f96a6a57e11c0a271408f3bc43a2447
-
SHA256
705b324d1e0af687404451bb9594bf288dfbb86e50893148997f5fd87d47ed16
-
SHA512
4f9aaf9d549f9e40f9c1dfafce11c4941590ec8dc9a068f84c4a205a26081c6b48b362ed963c9cd10c72e44f87bca904cd5280e1ecba47f955fdf9ba493837c0
-
SSDEEP
1536:ztV6HGavhga6c5GxpJWR89Wpei/GV1EIa:ztVqnvu1pQRwWjGLEIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6211e6b46c021cebc712c239d8b54485_JaffaCakes118
Files
-
6211e6b46c021cebc712c239d8b54485_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ