Static task
static1
Behavioral task
behavioral1
Sample
a6ec9936da55764657cf7a5d88c646a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6ec9936da55764657cf7a5d88c646a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6ec9936da55764657cf7a5d88c646a7_JaffaCakes118
-
Size
142KB
-
MD5
a6ec9936da55764657cf7a5d88c646a7
-
SHA1
3dd6b3a2236b30f7297aebab2f382fb89ddde933
-
SHA256
90e0a6321cb743d2af4c09ab65f822ae2e6c3c1a07fffa76bb1894b3b0817fc1
-
SHA512
e64c2e6f520d7e9a6d6ccbe214b2c3483b307c03f1f5ffc16f987741fd5ce90f1f734b5e3920e45558c16d58bb400221a18d5182d7709364d31e6372e9fc064b
-
SSDEEP
3072:btZ8jnTv/D5G+/vbg0Q1opiWi9eeNMkKtXcy0m3RTy1/JnoJaR:L8DTXYAvbKoji9NdKtMSydJno6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6ec9936da55764657cf7a5d88c646a7_JaffaCakes118
Files
-
a6ec9936da55764657cf7a5d88c646a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
93ba2a8cc233cd1969707074da61d863
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE