Static task
static1
Behavioral task
behavioral1
Sample
a6a2ec5788f3de38af73d534f1656a12_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6a2ec5788f3de38af73d534f1656a12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6a2ec5788f3de38af73d534f1656a12_JaffaCakes118
-
Size
42KB
-
MD5
a6a2ec5788f3de38af73d534f1656a12
-
SHA1
928d455a2ed6b247c6f052c52009d378f1954f35
-
SHA256
86166c8254800907839f8b5e73e55c5de20471b3ba24b4db8bb1b9734d81a629
-
SHA512
6d3e09eaca2148e212a1d943eabe340609395bf26a167d9b4694bbbb3ffe75c7d41fda2da73a4b06837a67416e50e922182641b85233c5cb4c87723d3c7a83a5
-
SSDEEP
768:VAK0pgQB/PTSYu9gEOHCzkRVWDAZQ5P5cdRGWBo5mAGUg/Tc8CTAekL2lNJnKgq+:aFHPTS1IWDV5cdRGWi0AC/o8I62L8FZA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6a2ec5788f3de38af73d534f1656a12_JaffaCakes118
Files
-
a6a2ec5788f3de38af73d534f1656a12_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa77d18b40072a7e1dc36630aafffd27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
Sections
.lossy0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lossy Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE