Static task
static1
Behavioral task
behavioral1
Sample
a6ca893a01483bf2e08dc5e3e15f9a3b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6ca893a01483bf2e08dc5e3e15f9a3b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6ca893a01483bf2e08dc5e3e15f9a3b_JaffaCakes118
-
Size
384KB
-
MD5
a6ca893a01483bf2e08dc5e3e15f9a3b
-
SHA1
856cd8e02ff4ce16918ab67caf1f022c46eb340e
-
SHA256
56717f9f72661f3a5d27d82d831a4743f1e247b6a2127a86ef465b9f0fb89083
-
SHA512
3a250372271aafcf0e427dfd08ec0530a11f85e6b031d5d5b9813580a7d87393e58f80592d8abb0415fee28ff5e6a9ef1244b35cea38aca3cfd087eea6de2fc9
-
SSDEEP
6144:pS3xMBMPLfpTSMe8XJqXE5aftJH9BpagoWQqr2BC9QxmU2C8IFNXEfTQokBTw:pS3xMBsdqXpfdBpaJWQvPcHIfWyw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6ca893a01483bf2e08dc5e3e15f9a3b_JaffaCakes118
Files
-
a6ca893a01483bf2e08dc5e3e15f9a3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9fb3b0e5b49de5baa8db6b00b7f07149
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
ord696
oleaut32
VariantChangeTypeEx
Sections
Size: 328KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE