Static task
static1
Behavioral task
behavioral1
Sample
a6d08495761ce30dee49820e9a0a7a7c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6d08495761ce30dee49820e9a0a7a7c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6d08495761ce30dee49820e9a0a7a7c_JaffaCakes118
-
Size
20KB
-
MD5
a6d08495761ce30dee49820e9a0a7a7c
-
SHA1
6b9114d03a71bb00eef460897c155b4c80415a3f
-
SHA256
e9214307d569588709991fc3f153578c9d665055441ff2636e76f6b2eb91b06a
-
SHA512
eeb4a474a8209a5728bf2fc0dd608fa532b2e9fcd78bafb7072c7b562094498f20fc91d17a5de04cfaf7beebe729572af6bb9ecacd5b8056f534450bf1ac7c10
-
SSDEEP
384:C+ElWhZRAtdqchlyyHhfhdTTHlSEriDxEEMGEuuSCdu7EWmW4Y:BCtHiqhf7/HlXi1JEuUMEDW4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6d08495761ce30dee49820e9a0a7a7c_JaffaCakes118
Files
-
a6d08495761ce30dee49820e9a0a7a7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
c57dbf941590de889e04ebac03ab2984
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
ExpandEnvironmentStringsA
BeginUpdateResourceA
FindAtomW
GetFullPathNameA
GetDateFormatA
GetProfileStringA
FatalAppExitA
GetPrivateProfileIntA
WriteConsoleOutputCharacterW
SetFileAttributesW
GetConsoleCommandHistoryA
UpdateResourceA
user32
GetWindowModuleFileNameA
PostThreadMessageW
FindWindowA
ModifyMenuW
GetClassNameW
LoadCursorFromFileA
CopyAcceleratorTableW
FindWindowA
GetAltTabInfoA
gdi32
RemoveFontResourceW
ResetDCA
CreateICA
DeviceCapabilitiesExA
GetCharABCWidthsFloatA
Sections
.text Size: 15KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��� Size: 1024B - Virtual size: 838B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 898B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ