Static task
static1
Behavioral task
behavioral1
Sample
6387002307eb4e81f4eb3612a5043774_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6387002307eb4e81f4eb3612a5043774_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6387002307eb4e81f4eb3612a5043774_JaffaCakes118
-
Size
59KB
-
MD5
6387002307eb4e81f4eb3612a5043774
-
SHA1
926a31a8344196500bda8b857eb43e6d51d7abd7
-
SHA256
5431c5fdd3a47b1da032ce642f6bd1a639984a9e3d06859508f5e9a5b1311dbf
-
SHA512
6ace1bc08d67edf249e7f1a6cebb9db68e1df5de3238c21f161619d4ba7751ec72bed90e9371e157fa283834eac6d3671cdd92d17612ee3823a019e6f470a3bb
-
SSDEEP
768:Xyvcxyu5KgonDbotCMkGmCb2qA/Lu9Bmu0A6pfFNvL6uIrGuVZuFmViy:YJasnooy2rTu9bJSLB4GuVPV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6387002307eb4e81f4eb3612a5043774_JaffaCakes118
Files
-
6387002307eb4e81f4eb3612a5043774_JaffaCakes118.exe windows:50040 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
zbzbyqqj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
byjzbyja Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yayarabr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iazzzari Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ