Static task
static1
Behavioral task
behavioral1
Sample
6faf76fe9f01a1813a1c4572f25e52eb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6faf76fe9f01a1813a1c4572f25e52eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6faf76fe9f01a1813a1c4572f25e52eb_JaffaCakes118
-
Size
160KB
-
MD5
6faf76fe9f01a1813a1c4572f25e52eb
-
SHA1
a111c0ae160e76506f52583699a199a3a0265eee
-
SHA256
0aa57b4d5f6aa04b6be2d8d7034c69224e546a798c9b73c21b88a689358e8773
-
SHA512
a5a23efce6d9474e917703ca7f24d260744adcb9bf6cff17b32f45d347fc879094ac658fff4fb078003ec68c3684e6bd7f7785f2f2e41906a66545a01f98e583
-
SSDEEP
3072:DGHRTFo/OZy1Je8vkvke8RXFzz0928IFdHDEaCc/BKX8VbSDZIQR3JxRBe+:qHRTFo/OU1JTvkGzzgIFdPB7VuDyK3Jg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6faf76fe9f01a1813a1c4572f25e52eb_JaffaCakes118
Files
-
6faf76fe9f01a1813a1c4572f25e52eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE