Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6a699195dcc432ba04a55d3c57cfb490.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6a699195dcc432ba04a55d3c57cfb490.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6a699195dcc432ba04a55d3c57cfb490
-
Size
599KB
-
MD5
6a699195dcc432ba04a55d3c57cfb490
-
SHA1
6856d17223f34e2cc94a92f398edf8b9f178a9b4
-
SHA256
bf2911d8d58136b627307249a4f836eded570d086fd0f670990de5161bdc83f2
-
SHA512
bb7147ba4ffd4e952c55adf8844da0c609a620a029f4a3ebfbe16235c3b8fa07cd5de7ccf12783fe9aae5766c0f37e31fdfdd8829070689d00ce2f1e176f5739
-
SSDEEP
12288:2VOBVTxcqfx0G2klcB4/iq7Aoo1RnA8y+rrlbOjkcxWnfxnX/:2OBVlh0Vic6x7UphMBcpnX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6a699195dcc432ba04a55d3c57cfb490
Files
-
JaffaCakes118_6a699195dcc432ba04a55d3c57cfb490.exe windows:5 windows x86 arch:x86
924bd2cabf98060b178835c681e74138
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DispatchMessageA
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA
PostQuitMessage
SetWindowLongA
kernel32
GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetModuleHandleA
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 560KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE