Static task
static1
Behavioral task
behavioral1
Sample
6f3574a7788bbcbf710a249f8829406c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6f3574a7788bbcbf710a249f8829406c_JaffaCakes118
-
Size
526KB
-
MD5
6f3574a7788bbcbf710a249f8829406c
-
SHA1
6772703ecf36f527c7e195543116bb77fe368fd0
-
SHA256
04357a9d314b1f2595d42bb92bb025a1f9e3f3c980b0410160c761039b1f54d1
-
SHA512
d101301bf92425b27bac48a3d18d76ae07d9d1d634dce7e3853c225db0492432551fa77538b42b05557a69e01519bdbae2d7350fb82dbc5ebe10527197c061cb
-
SSDEEP
12288:XLkt+tcBo8dqmP/LdCyf4GmcsbHAm5vKsh1aeW6M6m8x6:XLkt9jdfEG4bgAKshPW6A8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f3574a7788bbcbf710a249f8829406c_JaffaCakes118
Files
-
6f3574a7788bbcbf710a249f8829406c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e036bd3de1e2ee3210581d9366a559c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
Sections
Size: 28KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
urbbklwr Size: 473KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nqumgqtr Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE