Static task
static1
Behavioral task
behavioral1
Sample
0940756ede23df636706c12e33751f49_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0940756ede23df636706c12e33751f49_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0940756ede23df636706c12e33751f49_JaffaCakes118
-
Size
40KB
-
MD5
0940756ede23df636706c12e33751f49
-
SHA1
f14800b91c494e31d70945117bb2809334cb54df
-
SHA256
a51eea9e700b8f7a9161ef1c100641eb20a1aa70c0c22abe385cd2ac7ce75c6c
-
SHA512
83ed2780d13b450df20258ea03bd7323eb27b1a81725e5613d917a993010aa5fd07b751dc0a37deb330c4ebbcba96ea75ea90320a6eaf35807c86d0290c3e02b
-
SSDEEP
768:zJui3Uc0MhPGpOhopZwTBRD7FsX6dwJ6qh9axQoHCRZQ0UC:NN0MhPGp0VtuX6ajh9aGRD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0940756ede23df636706c12e33751f49_JaffaCakes118
Files
-
0940756ede23df636706c12e33751f49_JaffaCakes118.exe windows:4 windows x86 arch:x86
add804a6e89a60059dd0837dbb009e54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWriteWatch
advapi32
RegCreateKeyW
Sections
.text Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ