Static task
static1
Behavioral task
behavioral1
Sample
f6bd18d986fd22b21892e33d84432883_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6bd18d986fd22b21892e33d84432883_JaffaCakes118
-
Size
1.3MB
-
MD5
f6bd18d986fd22b21892e33d84432883
-
SHA1
9cf09d83ec9c170d03ece0ea2f12a0a82e4b088f
-
SHA256
bac55e3cc7235798711da4e5905dad0e68441a978ae97ae7e68a9b772377b308
-
SHA512
63ba5e28b7a1aa5b040a57e5cb3e6eb0a44880e31e979e87225d1886c3606d0e42d14b3378403c0586ec5c5d75248999cb06b3eb23987bd098abddd76cb21ea8
-
SSDEEP
24576:qrY9uiXCZEmH+AoNRx0Dz3QEZ3Ipm8BvQ+F+NWDpYtxrRLdPtNO:SiXC6mHRHQuO1InWDGtxrRJtk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6bd18d986fd22b21892e33d84432883_JaffaCakes118
Files
-
f6bd18d986fd22b21892e33d84432883_JaffaCakes118.exe windows:4 windows x86 arch:x86
35a9e9974c673669c35cafffdf20e1bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
Sections
.text Size: 667KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 34KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PKV Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 512B - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RVX Size: 624KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE