Static task
static1
Behavioral task
behavioral1
Sample
6a04b670edac87296a0e2dc93e44bdcd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a04b670edac87296a0e2dc93e44bdcd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a04b670edac87296a0e2dc93e44bdcd_JaffaCakes118
-
Size
190KB
-
MD5
6a04b670edac87296a0e2dc93e44bdcd
-
SHA1
0466394cb4f81e1b131a1a9efe4c97ed210dbcdf
-
SHA256
53787a39879ecb96f66b558c6c48b3389922a482352f1beb1d4e94b595360b67
-
SHA512
a15ab1bc3d764ec846582866bc5a49e1fd9f751060ad342e76664ee6c17d0e822767d19858332519edf785f97f539791a22ff213d63b7865bdd48ba7898a4873
-
SSDEEP
768:SpXTnMD4owDzVMAW1WXaQ+0qCPi5Et6GIf1zBmQzTGfmgyq/FU:iXTSHQ+AWwXpPhttIf1zwQVgv/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a04b670edac87296a0e2dc93e44bdcd_JaffaCakes118
Files
-
6a04b670edac87296a0e2dc93e44bdcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE