Static task
static1
Behavioral task
behavioral1
Sample
0d53258cf17f0abdac8ff8631aeb36f5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d53258cf17f0abdac8ff8631aeb36f5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d53258cf17f0abdac8ff8631aeb36f5_JaffaCakes118
-
Size
453KB
-
MD5
0d53258cf17f0abdac8ff8631aeb36f5
-
SHA1
4f101ab8570a048913830ad60639dcb85882a3a7
-
SHA256
9864932af644ce209cfe6f8256703c0947dd59dd6eca5cf589a35a064667d491
-
SHA512
3f5cd5fbe47bfed602627caa20cbea37f4a505f0f2efb4dadbecb449138729997d7c17fde93adb0bb792fac1309f0782de0c8d340517e257d941c22009bd010b
-
SSDEEP
6144:N3PoqF40Lqb0OAF55000LuHMUfqFvAltgBxJXfYQL1u7T7VuEaHKgLjf4h0m:1Pj49O50RhbfY97ZL2jfmn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d53258cf17f0abdac8ff8631aeb36f5_JaffaCakes118
Files
-
0d53258cf17f0abdac8ff8631aeb36f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
e399161ab0ea70e8f4e7647307ddbe5e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegCloseKey
GetPrivateObjectSecurity
IsTextUnicode
LogonUserA
kernel32
CreateFileW
ReadFile
CloseHandle
CreateFileA
RemoveDirectoryA
SetConsoleMode
HeapSize
Sections
.bshgh Size: 36KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hwx Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xed Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zad Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE