Static task
static1
Behavioral task
behavioral1
Sample
6694f80292795bdf219f517425432987_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6694f80292795bdf219f517425432987_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6694f80292795bdf219f517425432987_JaffaCakes118
-
Size
386KB
-
MD5
6694f80292795bdf219f517425432987
-
SHA1
0b0aeff76fd7c72d3fdc75de8e6aa3c23abcb862
-
SHA256
9afd05354daf9ce9f14ba9d1543cef2348f96c34a1e4193c17bdc205504dc3df
-
SHA512
b217c25b2a11f789f073ec11595e17fe3264f8de35d6db5941d65ed435dbc5bda41b57c91ab78d61c2fd30ed21548373e518ace5ec73ece58b2f29ee73725a66
-
SSDEEP
6144:U4bVxTwALrRyRe+XaCvr4sxMyf9Klgz1OC0s7i4t/jshvxls2lzEju3ldfqQ/:pwALrRKe+XPEsggzoC/slXs2BrVdf//
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6694f80292795bdf219f517425432987_JaffaCakes118
Files
-
6694f80292795bdf219f517425432987_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@ Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE