Static task
static1
Behavioral task
behavioral1
Sample
6f327f1964e38ebad0195323f1689c2e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f327f1964e38ebad0195323f1689c2e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f327f1964e38ebad0195323f1689c2e_JaffaCakes118
-
Size
129KB
-
MD5
6f327f1964e38ebad0195323f1689c2e
-
SHA1
5c8a3cb299be5731bc68009f22aecef89c59a048
-
SHA256
dfc9efd70558588d6932f508c2fa1e8bcc2773bc8f511da5534bc4a2517db41d
-
SHA512
54a62901629e6310c6e687f217e278395b82c0e2610b35c239a2027efcaa7a5223413372810aed5002653ec91b32083f8d0fe47b277a47a913507ff93553a52c
-
SSDEEP
3072:W6aAd1+xHRi/rUXNbw25SCsu2oh40kv3VucVEo7qKmC:WwUXS25Fsu6vFuy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f327f1964e38ebad0195323f1689c2e_JaffaCakes118
Files
-
6f327f1964e38ebad0195323f1689c2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab343a50695b86d43c62e1f2c4443dfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeMountPointA
WriteConsoleOutputCharacterW
NlsConvertIntegerToString
QueryPerformanceFrequency
lstrcpyW
TzSpecificLocalTimeToSystemTime
GetThreadPriority
RestoreLastError
GetStringTypeExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE