Static task
static1
Behavioral task
behavioral1
Sample
a6a715d34b8d717141c1862302c08b58_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6a715d34b8d717141c1862302c08b58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6a715d34b8d717141c1862302c08b58_JaffaCakes118
-
Size
143KB
-
MD5
a6a715d34b8d717141c1862302c08b58
-
SHA1
d7e674e20173d9a51eb6ccaa96bf4be76e245591
-
SHA256
94864200cc952f9f47b03e5b2fcf2ecd1cc73efc79311269a861b8f397ea5bcd
-
SHA512
b359e1bdae34b15c169787e21c7dbd0a1ee77bf4a8d911e2eddf0f496ca1ba221494d9b6bed77dcbe54805fb0dec2260ae330c8b5b8e043cca94830e2bc23629
-
SSDEEP
3072:0amfCK6AZIK33QMh5LnKmFBmDCUocEs3AJcggeIbzNaw79Y+B878Un4nU/ITmeKQ:dkZIKnQMhxJFQOs3ycggtbhaw9YsU4nR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6a715d34b8d717141c1862302c08b58_JaffaCakes118
Files
-
a6a715d34b8d717141c1862302c08b58_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: 136KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE