Static task
static1
Behavioral task
behavioral1
Sample
6ee8ca9041e57b14351c412992a1632a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6ee8ca9041e57b14351c412992a1632a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ee8ca9041e57b14351c412992a1632a_JaffaCakes118
-
Size
11KB
-
MD5
6ee8ca9041e57b14351c412992a1632a
-
SHA1
bbc53ed631c6cf5a0a51d614b3bbb3fe0ef5ff0c
-
SHA256
a830d137f392cee0dc1bf8fee9d77f6a88883594ce3c27148bb0dad021f158a5
-
SHA512
218371f80252c03b078f2af44d894236be584917205959c1cf5320aebb168300de8f634489ab0c4e90f0d440d854fd0493fb5f53e1932bc71aea193606f0d6c3
-
SSDEEP
192:D4QA6oj57CMVPpUpoBPdlPMGYY8qNbNxieSSJDJlJdaQ49fnu2D4+fQLTmU72Btl:D4QA/RpLB1lPcY8qhxJSwtlzaQ45nlDZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ee8ca9041e57b14351c412992a1632a_JaffaCakes118
Files
-
6ee8ca9041e57b14351c412992a1632a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE