Static task
static1
Behavioral task
behavioral1
Sample
6ee72f79d80dbab6cc9bd565fe3368b9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6ee72f79d80dbab6cc9bd565fe3368b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ee72f79d80dbab6cc9bd565fe3368b9_JaffaCakes118
-
Size
46KB
-
MD5
6ee72f79d80dbab6cc9bd565fe3368b9
-
SHA1
b80848668d27ef23478ada51f8ac9b19452b1537
-
SHA256
405194ee72c61060f320c8b405666f4edf697a148b936e95c27cd87abd43cfdd
-
SHA512
2dec7e94cc701f59faf1b05a8c531b10e96373641bbc5852910f89eeef02fc60a92de4a22e5e0452acdfba594b9beb44cdbb03d46e11482b7f5b5bc9aab197a6
-
SSDEEP
768:thXVknunKwdWJAGj3P7Or71UMZS9LwLZocJHXApgNglNQC7xdDi0LFh1HxXeb89J:HFknuKbAW3Cr7JSsbXIgylhT1xew
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ee72f79d80dbab6cc9bd565fe3368b9_JaffaCakes118
Files
-
6ee72f79d80dbab6cc9bd565fe3368b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE