Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6a852f3f28a75def46974009e5b569e3.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6a852f3f28a75def46974009e5b569e3
-
Size
68KB
-
MD5
6a852f3f28a75def46974009e5b569e3
-
SHA1
997c1155453b3ff415a76dd6ed63a107385f7efb
-
SHA256
f1313bbd77810038b3c423eb2c300adc856a63143da7ea9ccb1353a9acc98eb4
-
SHA512
49ea1108501d2bd9c3bc114d01c7d1601ed0c4556bfcb669eb7e1e9518aa760858d127ac53176ad63aee485e5c13ebabc9caf44f2ca5063a645c1f59c6b9b5d5
-
SSDEEP
768:mVWES4y2xSot1iuA3dS4beiTvq12zJFmE6X2iXkatjpIs2B9XajL998i+fasIqHp:0nxy2YobszXymJ7A2aJ2fKdR+f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6a852f3f28a75def46974009e5b569e3
Files
-
JaffaCakes118_6a852f3f28a75def46974009e5b569e3.exe windows:4 windows x86 arch:x86
9d36180bdb1391cb95d110593293cca7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetFileType
GetProcAddress
GetVersion
LocalFree
CompareStringA
LoadLibraryA
user32
CharNextA
GetMessageA
DispatchMessageA
TranslateMessage
CharPrevA
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ