Static task
static1
Behavioral task
behavioral1
Sample
6313087708d11aafca63c324771ab014_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6313087708d11aafca63c324771ab014_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6313087708d11aafca63c324771ab014_JaffaCakes118
-
Size
76KB
-
MD5
6313087708d11aafca63c324771ab014
-
SHA1
b8b1d735316d4589115dc1cb90f7aa21fd11a8fe
-
SHA256
bd774f8457a3e21afbe37c2d1c2cc6b852e6f413398d8eba59575afb2b874623
-
SHA512
3aef84e0ea1ff0b416eec4311eaaa9c24492a27e298ebbdf093507a37dbdd71e81a6dcf7d63e95b1362304e8f05ae49df3954435e4bfcd458b2eb5b4e62eba7a
-
SSDEEP
1536:gBEfjLuNBmiovqoWwcU1zjsCWG2zTyax94QThgLz023EZpjVrs2ryrd1vUQuq6:wEfjLuNBm3v5Ww919RuNxu4GLz023KHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6313087708d11aafca63c324771ab014_JaffaCakes118
Files
-
6313087708d11aafca63c324771ab014_JaffaCakes118.exe windows:4 windows x86 arch:x86
604b125bac617624b1f8d8b5b5a17fa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFileEx
GetWindowsDirectoryW
ExitProcess
VDMOperationStarted
UnlockFileEx
IsDBCSLeadByte
GetSystemPowerStatus
FindVolumeClose
FindFirstFileExA
HeapReAlloc
GetNumaNodeProcessorMask
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE