Static task
static1
Behavioral task
behavioral1
Sample
014524677dc59ac6cbfaf62709bd7b27_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
014524677dc59ac6cbfaf62709bd7b27_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
014524677dc59ac6cbfaf62709bd7b27_JaffaCakes118
-
Size
46KB
-
MD5
014524677dc59ac6cbfaf62709bd7b27
-
SHA1
0a5de0ddf7ce4dc39e3c47de57170c3e3854385f
-
SHA256
bf2157af5512a0f72129f1582448a34923352c8c044207158b5b1c1637eeeb96
-
SHA512
f1a042659287326e5885ff461a777fe32a9c449fd7a895d0fefcb5172b651325fc82ba2883b32c28f1f3b45cd88f474b386d2547cd4241ae69f8babbe83aef3f
-
SSDEEP
768:swtJDrJXCaERue4jh6pUQsIzGi5LFn0knvDXvqsAvYUk:bMFpUQ7bnrvLSFAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 014524677dc59ac6cbfaf62709bd7b27_JaffaCakes118
Files
-
014524677dc59ac6cbfaf62709bd7b27_JaffaCakes118.exe windows:5 windows x86 arch:x86
6747ee7feecac4924ab7049749d884a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateTokenEx
CryptGetHashParam
RegQueryValueExA
CryptCreateHash
CryptReleaseContext
RegDeleteValueA
RegCloseKey
RegSetValueExA
shlwapi
wvnsprintfA
SHDeleteKeyA
PathFileExistsW
PathRemoveFileSpecW
PathCombineW
StrCmpNIW
wnsprintfW
wvnsprintfW
StrStrW
PathMatchSpecW
StrCmpNIA
PathFindFileNameW
Sections
.uhqpox Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mfmj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ypwpax Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ