Static task
static1
Behavioral task
behavioral1
Sample
b6383953cd7469699712d760b940d9d2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b6383953cd7469699712d760b940d9d2_JaffaCakes118
-
Size
2.6MB
-
MD5
b6383953cd7469699712d760b940d9d2
-
SHA1
86e16ba5a40193d0fb2772d27ce687ad5f718131
-
SHA256
ac73f70d4ac7ea0c015ef3145c0ccc1c0e05781ce6f51a7172c6efbb25a5a88f
-
SHA512
16cb1a2a2f3ee68b1ad7ad891c257cc81f88f9afb444deced2e68e671e12aa1463142bfdbbab2d0fa30ae3390cad03791ee4877bbaa1fb99b0cadb10af0f0ae8
-
SSDEEP
49152:mEy3jTUUZO7wdf743gi1ncNdW/w89O3j9eU4M8trlSLFsEG:md8UVdD43gi1ngW/50j9e9MMpSLJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6383953cd7469699712d760b940d9d2_JaffaCakes118
Files
-
b6383953cd7469699712d760b940d9d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
26185df057e3d7060b5c07eb5dce051e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetCurrentDirectoryA
Sections
Size: 314KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iwpijlhf Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gcwclivl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE