Static task
static1
Behavioral task
behavioral1
Sample
156ad5122025d729dc045d3560d74b30_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
156ad5122025d729dc045d3560d74b30_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
156ad5122025d729dc045d3560d74b30_JaffaCakes118
-
Size
664KB
-
MD5
156ad5122025d729dc045d3560d74b30
-
SHA1
318968e9b384628cce0b33c9b2e40e8ebd3b1f70
-
SHA256
f10b641e2fba19a07f1584dcca1e57278dd4823f9af421c2750c87795397b3f8
-
SHA512
52f27e9c2818c9a83bdbdf9538f5da55332ffc32d245d9909b63f94e6749216994a661d4936645a5b7a6a662b2de7bbdc6aeb5273ef941bbf0a74662f31fbd34
-
SSDEEP
12288:jZjFiKMYTSvjOi/DqLKBvKWPVCbYya9tUnbT4egbOtEi:VB6YTSvjOibq2BCS0Y5OnbbgCEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 156ad5122025d729dc045d3560d74b30_JaffaCakes118
Files
-
156ad5122025d729dc045d3560d74b30_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 464KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE