Static task
static1
Behavioral task
behavioral1
Sample
6977e5f722732db481552e7ae0245b0d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6977e5f722732db481552e7ae0245b0d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6977e5f722732db481552e7ae0245b0d_JaffaCakes118
-
Size
126KB
-
MD5
6977e5f722732db481552e7ae0245b0d
-
SHA1
15cd051b41f0150e14e1b2041480d9928aa91c8f
-
SHA256
b56f0b1e3a635268ce8bea3a5eb777fd124288aacd70fa17079647730eeb6c10
-
SHA512
07365770867d4cf787fee2cc7f3e10420a2d4c21bf1056d837bc63c21b2ce253cf1d1fbbd36e8b6e01e0dcda623735fb8071398e4b9eb3b70d7c0dc4e8e25781
-
SSDEEP
3072:7XEEWN7rt0DE2wa2p+67347v+RRSiY5vHyw5tIe2biE:rfOFywVw/aABvZ2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6977e5f722732db481552e7ae0245b0d_JaffaCakes118
Files
-
6977e5f722732db481552e7ae0245b0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
69848ba2fad42e9c181ad1835b41eae0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcAddress
GetModuleHandleA
GetCurrentProcess
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ