Static task
static1
Behavioral task
behavioral1
Sample
eb1cf2c94854f9e8f77bb0b14bd3e421_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb1cf2c94854f9e8f77bb0b14bd3e421_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
eb1cf2c94854f9e8f77bb0b14bd3e421_JaffaCakes118
-
Size
46KB
-
MD5
eb1cf2c94854f9e8f77bb0b14bd3e421
-
SHA1
2d087361fece382f8bdd7cee78bc60d00ceec1ad
-
SHA256
45d6e123af3f7ad81b6f439efaf06a4496bc732f5f7519cc518353b01f5d678f
-
SHA512
8beb71c27838a4a0afcb3b143df3ec6ca90cc64f9008fbcfd4dcb2ee2d6f2d4352f7925f6b8b542d154b0bc064ebed99f2505891a929a4e1e39c1687d25b5134
-
SSDEEP
768:AmCnl8FWsnfORUkMWdkuR3ZKmf4TEh8ZDIy2xcC30WdYxZpJTFTEr:7Cl8IWYDdkuR3ZKFEh8OT0RzlTg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb1cf2c94854f9e8f77bb0b14bd3e421_JaffaCakes118
Files
-
eb1cf2c94854f9e8f77bb0b14bd3e421_JaffaCakes118.exe windows:5 windows x86 arch:x86
2b47c3e59d9dcac6b5d9b3c20802097b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptCreateHash
RegQueryValueExA
RegDeleteValueA
CryptReleaseContext
DuplicateTokenEx
CryptGetHashParam
RegCloseKey
shlwapi
PathFileExistsW
PathRemoveFileSpecW
StrStrW
PathFindFileNameW
StrCmpNIA
wvnsprintfW
wvnsprintfA
wnsprintfW
StrCmpNIW
PathMatchSpecW
PathCombineW
SHDeleteKeyA
wnsprintfA
Sections
.gpqxqd Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cbgrql Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vsrqd Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ