Static task
static1
Behavioral task
behavioral1
Sample
a6134833ddf5abf04bd478a389868e6b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a6134833ddf5abf04bd478a389868e6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6134833ddf5abf04bd478a389868e6b_JaffaCakes118
-
Size
691KB
-
MD5
a6134833ddf5abf04bd478a389868e6b
-
SHA1
bb503571963ec203b502ebc7c853be59a2571508
-
SHA256
ec08b9c42c0bd6e06a575f8a0e7763c2aa7411260867e9695cbc5892e0e53d4d
-
SHA512
d6ae4dc9366477924c41c2de0846430fd39db9ace4d048eb469fe5cf4bef8c0f5ba64ecc9f3484450470d23096e5a112a9395be1c4e02c34a429a833c8a5b314
-
SSDEEP
12288:HqBXs16bsAzAJJc8Twq3y5MiQtZMsN7nD9Yfa/P3cY8TbPn6OUIdO4nPe02:Kps8bTEJ133HXlRnZCa/fz8TbP6DRUGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6134833ddf5abf04bd478a389868e6b_JaffaCakes118
Files
-
a6134833ddf5abf04bd478a389868e6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 674KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE