Static task
static1
Behavioral task
behavioral1
Sample
62f7fde5bbe69c9d0e700950d8ea8b86_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62f7fde5bbe69c9d0e700950d8ea8b86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62f7fde5bbe69c9d0e700950d8ea8b86_JaffaCakes118
-
Size
85KB
-
MD5
62f7fde5bbe69c9d0e700950d8ea8b86
-
SHA1
a8fbc0813c83fa439340b5ceeff2acba21cb925b
-
SHA256
ab178a1e3f41a738b80728e246f1d5e30e45ac8132c0773c371f28f6bced27e0
-
SHA512
a69bafc8ed2bae1e4261ecfb23fafd785e01f752345f2f4eba3fc98e4190927ca3408ddac8fd3e90a894ce8ea72a5a23ea967be7a854cb4b294efa0ec243a562
-
SSDEEP
384:SoAwCUPCZtYQKjcYGbHFfoCWNaHG9n1bG10JBqC:SUPCZ1mMH6C4iGXbG10J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62f7fde5bbe69c9d0e700950d8ea8b86_JaffaCakes118
Files
-
62f7fde5bbe69c9d0e700950d8ea8b86_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6xthbcd9 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stiuk.kk Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unq5ueci Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ