Static task
static1
Behavioral task
behavioral1
Sample
6f434cdb15456e51a826e5ff102a6507_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6f434cdb15456e51a826e5ff102a6507_JaffaCakes118
-
Size
1.0MB
-
MD5
6f434cdb15456e51a826e5ff102a6507
-
SHA1
2b8d7d59a1ef52a3047c0a246c737f813bf6745c
-
SHA256
4c8e581590656680dfc4738eda464dd003a9108bde5149e9b121501ca764123b
-
SHA512
b2796f9d8c204404843cdd262902fe503721df2b825100de72f0d752f3abae0429f3ae87b7af7bc992bd751b2987d9b2ffaaf4c4c5678318644dad9f182601dc
-
SSDEEP
24576:BCNEYWMG2HkSqU94TK+B5gt5W0dHLoti4zyI0Fyrcy:oNFniKVrW0Fyybyrz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f434cdb15456e51a826e5ff102a6507_JaffaCakes118
Files
-
6f434cdb15456e51a826e5ff102a6507_JaffaCakes118.exe windows:5 windows x86 arch:x86
3d971e905de80d6f0b65afbb7cb28b74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
Sections
Size: 255KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
afdnsuse Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
netuzvqo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE