Static task
static1
Behavioral task
behavioral1
Sample
6a40bac3d263b5b8a630bb6516df0592_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a40bac3d263b5b8a630bb6516df0592_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a40bac3d263b5b8a630bb6516df0592_JaffaCakes118
-
Size
836KB
-
MD5
6a40bac3d263b5b8a630bb6516df0592
-
SHA1
3f2be37650bb987ce7a4f895f06a8016de5def91
-
SHA256
6e14e9d659bbb7efb7aedbc1bdf9a1dbae141a88f7119dbb7723463fe3ecd0b0
-
SHA512
e182a730cfc0dff4d601fa7449e6ea298b862fad1b67942b96548f4052cca4f9bd868b52607ae38a98e68f35e667e9926d525c4762d80c5a09123c7a0b0eb346
-
SSDEEP
12288:hNQnBGINmkfoe2EmUs/AsQLdnA9AnDdq453sfYIW04eerfoVcf2BQTqGjygxc:hNQnMus/SJAGnJbevergKf2r7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a40bac3d263b5b8a630bb6516df0592_JaffaCakes118
Files
-
6a40bac3d263b5b8a630bb6516df0592_JaffaCakes118.exe windows:4 windows x86 arch:x86
211a6894773bd27790c296566d49ba63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
RemoveMenu
UnregisterClassA
GetDlgItem
kernel32
GetACP
TerminateProcess
Sleep
GetOEMCP
SetStdHandle
GetModuleHandleA
SetConsoleCP
GetStdHandle
GetStartupInfoA
ExitProcess
HeapAlloc
GetSystemTimeAsFileTime
TlsFree
GetCommandLineA
HeapSize
HeapCreate
TlsSetValue
LCMapStringA
GetProcAddress
VirtualProtect
GetVersion
LoadLibraryExA
ole32
StringFromGUID2
gdi32
GetDeviceCaps
msvcrt
_initterm
?terminate@@YAXXZ
memmove
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 600KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ