Static task
static1
Behavioral task
behavioral1
Sample
6a26788da8e833a61b4e797b64c57d4a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a26788da8e833a61b4e797b64c57d4a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a26788da8e833a61b4e797b64c57d4a_JaffaCakes118
-
Size
100KB
-
MD5
6a26788da8e833a61b4e797b64c57d4a
-
SHA1
23c66b18a0e3b74356b1d464274a3711c6215b65
-
SHA256
13ded4d7ad840a66e7b3058069229b3b97947bd0057f276bcaf262422346bb86
-
SHA512
294e8f4637ea4c81698971b070b75594ca807e70b6669a307418d972e9363079c2b4e04317acbcea32dc97f43162439c9fcc871a46c117564f26795788f316f9
-
SSDEEP
384:ktP4c9ZJUZuKwZCVMbQGufwJPJfM5OJn5aIXhY4TNbRLAVrSK9HERM:ktP7JUEl9XJPZM4R5txNbRrKKRM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a26788da8e833a61b4e797b64c57d4a_JaffaCakes118
Files
-
6a26788da8e833a61b4e797b64c57d4a_JaffaCakes118.exe windows:5 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 843B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_MEM_READ