Static task
static1
Behavioral task
behavioral1
Sample
a6aa49e77e85672d23fe92bf934c363a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6aa49e77e85672d23fe92bf934c363a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6aa49e77e85672d23fe92bf934c363a_JaffaCakes118
-
Size
345KB
-
MD5
a6aa49e77e85672d23fe92bf934c363a
-
SHA1
9527f04e7d0c1d35e07ca7ada930946ff741bd9a
-
SHA256
a6ae86659d4d790da508400e1c7a90fe0b43483fc8b80cc181fd828b8bdc0073
-
SHA512
0f89c4ef6445c2980353de9d6795663fa8bcd580190ed06c3b2e758332265e1343f2cf0fd3ea8a748ba444cbfd2657cdde0a49ba73b06b455720150b9e2d86e2
-
SSDEEP
6144:AawBiN/PMV5MkPU36tUKkl6Hx301NyCdQopKQZaBBGdNR4zGN+XOdK:AfVV5MCUu2cx3uQopK3BGdNR4zwAOdK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6aa49e77e85672d23fe92bf934c363a_JaffaCakes118
Files
-
a6aa49e77e85672d23fe92bf934c363a_JaffaCakes118.exe windows:5 windows x86 arch:x86
5152ae5655381d7ec3cf0cfbff896ac8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
CloseHandle
DeleteFileW
HeapAlloc
SetConsoleMode
advapi32
RegOpenKeyExW
GetPrivateObjectSecurity
IsTextUnicode
Sections
.tqx Size: 38KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hwzct Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rcnwn Size: 5KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ