Static task
static1
Behavioral task
behavioral1
Sample
6f2494ba63da275524b071b337b11218_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f2494ba63da275524b071b337b11218_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f2494ba63da275524b071b337b11218_JaffaCakes118
-
Size
620KB
-
MD5
6f2494ba63da275524b071b337b11218
-
SHA1
03d4477495f283e97d6d4520c7b654498cf7e774
-
SHA256
5d1076fb10704a883f1651a3b90f1d7b9a7bba3da15828d215bb17760bb13566
-
SHA512
83f43f723cfbf8bddbcadf043a57a159bd12ae3ec8bdeca77227e4365587ca61b7bf72d4994227506d9ca0045848f5c71a015ba07a772a29f0dd5e8d7c5e659d
-
SSDEEP
12288:5vzBRCTmynxiJljbU4FjKFx0UZ1QCHN/fBl4zYlklCy4uODythy/c:h9RC4j/UTFx9KCtH74keA97DyaE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f2494ba63da275524b071b337b11218_JaffaCakes118
Files
-
6f2494ba63da275524b071b337b11218_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 612KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE