Static task
static1
Behavioral task
behavioral1
Sample
06161b2a52f6625a5bf1fdf23d61280e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06161b2a52f6625a5bf1fdf23d61280e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06161b2a52f6625a5bf1fdf23d61280e_JaffaCakes118
-
Size
358KB
-
MD5
06161b2a52f6625a5bf1fdf23d61280e
-
SHA1
779ea4bac2bc393734d0617b182de0e46e93dcd9
-
SHA256
8d5de4a1dbd66c140c2128fb3c484233a9c96e7e0da0079b4a30a540bd4f7757
-
SHA512
cbd60b01c3ffc81811dbe75e3b2453afdfcfb630cb25b3b41d2ec06929f28a205a229ee90186d2952f749f4edf1d4ed5a5bbe6750b4ec4272a64d589474ad7e7
-
SSDEEP
6144:wWGfCBRkU5veftgYVx6pmBGWJPzyp7jJmu9GmlkMnJGqvYAtSiFeFMTqOiDaxFt8:wWGqBrGft7yoGWd871mu92CVtqFMT5zw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06161b2a52f6625a5bf1fdf23d61280e_JaffaCakes118
Files
-
06161b2a52f6625a5bf1fdf23d61280e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 259KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE