Static task
static1
Behavioral task
behavioral1
Sample
6a76bc8678566a19aa0942886691488b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6a76bc8678566a19aa0942886691488b_JaffaCakes118
-
Size
1.1MB
-
MD5
6a76bc8678566a19aa0942886691488b
-
SHA1
ba8126839a342be89d0cdfb08a044ef9ad0fa6a4
-
SHA256
d48a90e581d5f703c92f8e9b613a3c48784ca5862e3a0904194e86dbbb3d8d5e
-
SHA512
4bccb2cc75951f948994813db9cba5d22ba7eb9cbf5ee2891f136579b648e7cce0ce5846d96c5752becb3420760c7ce5d37771e6e138982905d052ab95209834
-
SSDEEP
12288:TheMVbPpTvHDLzGH1h6mA9PHwQMzHDRIzzAmwhWZbxV7shj7LqmGyvsL/ey:9eOTvTGHL6mqLMzHD0twhW1xV+fvw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a76bc8678566a19aa0942886691488b_JaffaCakes118
Files
-
6a76bc8678566a19aa0942886691488b_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f889f590a5f16ef94c6e17e2fe5b2a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetWindowsDirectoryA
LoadResource
SizeofResource
FindResourceA
CreateFileA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
CloseHandle
WriteFile
DeleteFileA
VirtualFree
HeapAlloc
HeapFree
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
HeapCreate
HeapDestroy
GetFileType
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
shell32
ShellExecuteA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc1 Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ