Static task
static1
Behavioral task
behavioral1
Sample
6eec31aaa7edce751eb2c4d9a9b1ebf6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6eec31aaa7edce751eb2c4d9a9b1ebf6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6eec31aaa7edce751eb2c4d9a9b1ebf6_JaffaCakes118
-
Size
32KB
-
MD5
6eec31aaa7edce751eb2c4d9a9b1ebf6
-
SHA1
048ebf750d9ca6fe56873bf9582c8a97599546dd
-
SHA256
73d543fc2ddba3659cc732222cbc3ccf48bcb3231a16fc4266b28309f5d970ab
-
SHA512
1bf868d8ca50abd7747617b5cce8811ec40c3e79c629312ff7081b6599e46c5b09b05c0f3459f6c497d4879f9a65248b4dbdfc8757c7f9f18a4ebf73f8d7ca8e
-
SSDEEP
768:uMmor84O3kbXJ35NGJSFyFtn5BEkMaLw/6cdQc/m:uMY3kb5/dFOt5SkMa8ScKc/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6eec31aaa7edce751eb2c4d9a9b1ebf6_JaffaCakes118
Files
-
6eec31aaa7edce751eb2c4d9a9b1ebf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE