Static task
static1
Behavioral task
behavioral1
Sample
6f1533ab3842c079e01ac69c5012ca6e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f1533ab3842c079e01ac69c5012ca6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f1533ab3842c079e01ac69c5012ca6e_JaffaCakes118
-
Size
94KB
-
MD5
6f1533ab3842c079e01ac69c5012ca6e
-
SHA1
509a481c0e4363f4705ecc5d1979e1207800e6df
-
SHA256
95ca4202d49d331ab4d90d91d29d4ccedae1e8fd899ab44801d5ca48f50b6fab
-
SHA512
79192cf92b6038249a159ffc09998bc6db80d4b11e084cc7580bc21c42a61448eeff313b90676fef279e6ceaab697d6e117c674b5cf2b91768586285a90708be
-
SSDEEP
1536:eKCcSICeByhkET6p249V5gEonxvzkIGQucQ8ex/vF1yr54lk5L7wZdxfx/UU:51SIRBskESV9V55oxvNGQucQ8exXF1CK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f1533ab3842c079e01ac69c5012ca6e_JaffaCakes118
Files
-
6f1533ab3842c079e01ac69c5012ca6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 83KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE