Static task
static1
Behavioral task
behavioral1
Sample
1646649e0c055bc6cff8e997e9c46b7c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1646649e0c055bc6cff8e997e9c46b7c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1646649e0c055bc6cff8e997e9c46b7c_JaffaCakes118
-
Size
1.9MB
-
MD5
1646649e0c055bc6cff8e997e9c46b7c
-
SHA1
7c606d3f299955bfa613f0fa9639fcadf72c1e22
-
SHA256
f26cb1533e4bc311f4b6f5e52c5f78a18b41edd6b5a0a841ada767cb6d05f0dd
-
SHA512
acdfc173dfca7f3710beebd9d1014dc2753bfe73b280c11c46851d7d32326d64eb3b09484eb9509214924dc442bcaa377daea313b74206428fa0b82d5e58cb89
-
SSDEEP
49152:JYoytpR+D/9BNZX63ew/4CD/9hA30LMZm3ND/9j:JY+BBNZqV/fBCEoYNBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1646649e0c055bc6cff8e997e9c46b7c_JaffaCakes118
Files
-
1646649e0c055bc6cff8e997e9c46b7c_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ