Static task
static1
Behavioral task
behavioral1
Sample
6a9d4572a7ec9b19d91973d99ad84a41_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a9d4572a7ec9b19d91973d99ad84a41_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a9d4572a7ec9b19d91973d99ad84a41_JaffaCakes118
-
Size
451KB
-
MD5
6a9d4572a7ec9b19d91973d99ad84a41
-
SHA1
80c278cafcf5ac52195a4902a457c120b3c2cd23
-
SHA256
fc2602210bb2850bd9ec5835c3d2837927e38f20a951ae62f7344bb3fae4c207
-
SHA512
4588d0b40f582f7d993cde07a0ae56705f8707185269a562d3c5c23680b2288430880b28e8d573a536f1ad58ac81ab85eb568878637a29e938f230df3b146fda
-
SSDEEP
12288:WEAmFCl36NmzJlxWrtZWZ/LmGoUdUlUsfJ218Nn3ujR:W+Cl36WXwtu/JVdebM1Gul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a9d4572a7ec9b19d91973d99ad84a41_JaffaCakes118
Files
-
6a9d4572a7ec9b19d91973d99ad84a41_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 442KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE