Static task
static1
Behavioral task
behavioral1
Sample
6212a4c72e4a1c76ff32454a4442ae65_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6212a4c72e4a1c76ff32454a4442ae65_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6212a4c72e4a1c76ff32454a4442ae65_JaffaCakes118
-
Size
59KB
-
MD5
6212a4c72e4a1c76ff32454a4442ae65
-
SHA1
f1d01065ecfed3517d6a577bc5748a04abc8f891
-
SHA256
e3886b92a65e0ef8135a2f1fa04e281ef212761956aaf0b45fcf774927408243
-
SHA512
1718a5025983566bd477e8dfbbfd4cc07b70050812ced2468719cc828d54ea74a66ac01cf16ba6b8e537c394c4a4f0e833cd36dcda53ad3d3be5c6926d2a4265
-
SSDEEP
768:Jty0CHN0L6vDQvdFzXwzw+pKQDNhMFPV+N+aQmh5Tk/9LYDx9glQJV2s3WQXnB:ivDQvGwYKWP48rhoBYDx9NgsGQXnB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6212a4c72e4a1c76ff32454a4442ae65_JaffaCakes118
Files
-
6212a4c72e4a1c76ff32454a4442ae65_JaffaCakes118.exe windows:53687 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
zabiyrrq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
iqaryqqj Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
byjzbyja Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yayarabr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ