Static task
static1
Behavioral task
behavioral1
Sample
6a2d041a3d4fbbbb9bb5ee4e16103242_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a2d041a3d4fbbbb9bb5ee4e16103242_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a2d041a3d4fbbbb9bb5ee4e16103242_JaffaCakes118
-
Size
195KB
-
MD5
6a2d041a3d4fbbbb9bb5ee4e16103242
-
SHA1
c03983ac16a25263bf7d23756b22a2a9d2cf0e69
-
SHA256
43382af3990978d1a8741ee65779739827a832eab24430e7c0c78d7b05d4b507
-
SHA512
2b8ddf2807e0d142ed136ac611b2d04c3cbada044ed08f76f5812d6f0d4057b1fc40a397e203d1bf93ce35aa2c01d5b4c78c1473cb62625cf144b2d7db409635
-
SSDEEP
3072:E000mBDN+Uf0BgXjwHF64WnkaZSRpwG3IQuHeHE7prGVGj1uWGqooP:M0md+GXjg67nkaZSRpjuHeHG5GVyGqow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a2d041a3d4fbbbb9bb5ee4e16103242_JaffaCakes118
Files
-
6a2d041a3d4fbbbb9bb5ee4e16103242_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e82ec68160bd8fb2faf76c8dc0232f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadIconA
msvcrt
_exit
advapi32
RegOpenKeyA
Sections
. Size: 142KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE