Static task
static1
Behavioral task
behavioral1
Sample
6aa4c6cec57b894514e1354dbc148709_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6aa4c6cec57b894514e1354dbc148709_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6aa4c6cec57b894514e1354dbc148709_JaffaCakes118
-
Size
86KB
-
MD5
6aa4c6cec57b894514e1354dbc148709
-
SHA1
744cda027af9b1efb1a26a8d0780136d5f7a4c96
-
SHA256
dd38e89d5a8bbe6d615b53dec810d8ddc1ce21b41d0b0a4e46d51bdcba4fb385
-
SHA512
286a5eece9677ea36d75d0123201ed85748def96e97ad11990f7b912ba414f683af7d3353eb08de507b40f1643d051eb927e24114981e5d521a9e60c080f6c8a
-
SSDEEP
1536:A2rPmyIci/gjFSwO3EAOH1HMTY1s3FmHVJqkMqXQdINf1BnJNP7dcf7T61s5Vart:ABh/gjFtO3E8evngdINf1Njdw7T2cVaR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aa4c6cec57b894514e1354dbc148709_JaffaCakes118
Files
-
6aa4c6cec57b894514e1354dbc148709_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a21dbf513a91ab88107627506f06b99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumUILanguagesA
GlobalAlloc
UnlockFileEx
RtlCaptureStackBackTrace
EncodeSystemPointer
HeapCreateTagsW
NumaVirtualQueryNode
GetLocaleInfoW
SetMessageWaitingIndicator
SetConsoleNumberOfCommandsA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE