Static task
static1
Behavioral task
behavioral1
Sample
6a6821d566e324a5159587a63a22baeb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a6821d566e324a5159587a63a22baeb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a6821d566e324a5159587a63a22baeb_JaffaCakes118
-
Size
3.9MB
-
MD5
6a6821d566e324a5159587a63a22baeb
-
SHA1
14d6a8100c44eb140eec27b453bb6db047358921
-
SHA256
11ebc3f21e4d6aa0cc77d58264f9f54a782cb1594cd532f183bf24c2a209dc2f
-
SHA512
56cd67620bcaa40230b9c3484d25bb731bc84cec0a6a9cbc25b25b84fb7ad1b4422e0e7d3791d8e60a1efa8f756c9fd9b090c4edad94da645c99bcfac401e38a
-
SSDEEP
49152:7ETxBOBngADkpryG5MPFbxFdA/FX7+xpG8xA5cFcqMgETTGWVIRe9B3CQAeTPjfi:7JnJUyGaPFqRyxY8xAsFMgZRRIN7xt4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6821d566e324a5159587a63a22baeb_JaffaCakes118
Files
-
6a6821d566e324a5159587a63a22baeb_JaffaCakes118.exe windows:5 windows x86 arch:x86
1e4ef6066df5aa9c254d7c905ed56bb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoW
EnumTimeFormatsW
GetProcAddress
GetModuleHandleA
SetUnhandledExceptionFilter
lstrlenW
IsValidLocale
SetCriticalSectionSpinCount
psapi
EmptyWorkingSet
Sections
p Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
p Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
p Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
i9a Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
TBC Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
N4l Size: 320KB - Virtual size: 320KB
IMAGE_SCN_MEM_READ