Static task
static1
Behavioral task
behavioral1
Sample
b6fff5af3dd83df5c50b3bb8605cc408_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6fff5af3dd83df5c50b3bb8605cc408_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6fff5af3dd83df5c50b3bb8605cc408_JaffaCakes118
-
Size
11KB
-
MD5
b6fff5af3dd83df5c50b3bb8605cc408
-
SHA1
19f75eccbdeca69dcdae4dba19baa94d53286b29
-
SHA256
fb81b43daabcbec5fea107b2ab02ce38aa73950954b07c38b5e837e235c8f13c
-
SHA512
a52b7a21a803633c781ea74b2b99f49cf0eaf48eda8e807cd2f744c90bea5798782bab5e91141aef0045958c8823cc31fbbce15bfb33657b38928949109b9aac
-
SSDEEP
192:7supUCWYc0aaqBButO4br/9BZTh5taAsrhoH2WwsHRqjiSVpAWsmo1HIi:Qui+kBBMnZtas+sHqHOp1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6fff5af3dd83df5c50b3bb8605cc408_JaffaCakes118
Files
-
b6fff5af3dd83df5c50b3bb8605cc408_JaffaCakes118.exe windows:4 windows x86 arch:x86
316f9661c85558da7e0cc9df6322c345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
Sections
.text Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ