Static task
static1
Behavioral task
behavioral1
Sample
6fc5a77a8b30466d0a6cfbb0e72b437e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fc5a77a8b30466d0a6cfbb0e72b437e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fc5a77a8b30466d0a6cfbb0e72b437e_JaffaCakes118
-
Size
68KB
-
MD5
6fc5a77a8b30466d0a6cfbb0e72b437e
-
SHA1
e89bdaec8a4c43f4ac7de6e2ce698892d39e4954
-
SHA256
f9d664802455c03dcdf0671cc0e3d36ccda5ce04d74bc434cb3d8af01244b5ed
-
SHA512
123baf6cb94ef8ac6381cc78167bb7a53a9f24dc8c7418785875b8f9c98f9a6c8235d2ac7cf21f26364a5e6a59cdb6069110f83fa0a8c68df7b944d42bf5ac89
-
SSDEEP
1536:Hr5XMSlas4ftgmdsbeXa3rYNHQjbI70C2o:Hr56s4FgoskpQjk7io
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fc5a77a8b30466d0a6cfbb0e72b437e_JaffaCakes118
Files
-
6fc5a77a8b30466d0a6cfbb0e72b437e_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.avx���� Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE