Static task
static1
Behavioral task
behavioral1
Sample
6ffd6f8b22694067c82e43dfc5557c22_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ffd6f8b22694067c82e43dfc5557c22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ffd6f8b22694067c82e43dfc5557c22_JaffaCakes118
-
Size
56KB
-
MD5
6ffd6f8b22694067c82e43dfc5557c22
-
SHA1
3966a17f45ebf61f5238392ac4cc1524e5363e05
-
SHA256
da2d9f8ac559fcf2acc8094d563e93dafe1e2ff3dc89fe06ba91251ac688bf2d
-
SHA512
d7ee2cb9e71c2cbb2d35e56a888864635c0343ede00e5d7ea8d4249482d05b846ae989b291be62478d6ff31ea583e8a0eb632422a2a7486ac280767bba9a9eaa
-
SSDEEP
768:8wXYKHSRYu0HICf9+RV/FsQfH9S7i8tWCupoV1tsD9WO4wtVez:8wXYKVf9CsQ/MycnwtVez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ffd6f8b22694067c82e43dfc5557c22_JaffaCakes118
Files
-
6ffd6f8b22694067c82e43dfc5557c22_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE