Static task
static1
Behavioral task
behavioral1
Sample
6ff461f22590d07801ec51ab8bdcaa0f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6ff461f22590d07801ec51ab8bdcaa0f_JaffaCakes118
-
Size
282KB
-
MD5
6ff461f22590d07801ec51ab8bdcaa0f
-
SHA1
d5cca187184d1f0e881f3c80aefbd0c9eb6fb312
-
SHA256
cedcdd1ca24957d5c453b760eda47cd54054b8d607ec4b793cdec45ec8484e90
-
SHA512
52f39608e3bb1a1b3c8b98430e9b4b6cb303b880349f2f9cab9b87ced34e7c2632bbbbf41ae0faad39665299be4036bb7650e45d47f2dc9f591a26bb54efcdbb
-
SSDEEP
3072:wo9I9CjLPoFL6S46+++IEFed+uHWNYYCn8qQyrJicpP1Fl/tT1Znm/1eGZsmEMaP:h3QF+hoE6jYBy8cRJ/jZn2eOIhsA08
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff461f22590d07801ec51ab8bdcaa0f_JaffaCakes118
Files
-
6ff461f22590d07801ec51ab8bdcaa0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
98369abdbf1057ab6fb55fb5789ecf40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
lstrlenA
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcmpA
ExitProcess
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
GetLastError
SetFileAttributesA
lstrcatA
GetEnvironmentVariableA
Sleep
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE