Static task
static1
Behavioral task
behavioral1
Sample
212da55e4f2ca5fe16cb4daa7efbac15_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
212da55e4f2ca5fe16cb4daa7efbac15_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
212da55e4f2ca5fe16cb4daa7efbac15_JaffaCakes118
-
Size
155KB
-
MD5
212da55e4f2ca5fe16cb4daa7efbac15
-
SHA1
bf1c533e0e5ae8b1f344b5d27a80d513f0f477f2
-
SHA256
22b83d4bf097bc0dcbfb1faf5ac579dbcbbadf47859aafd8f1a9f4f37ef264e0
-
SHA512
9cbe06a84008f2f3d05fa78562b01c59bfab56223580838c1b0035b556475cadfc23fde30d5aff0e90342ea7b0e6e9173b854b8fdbc8a86bab814d0c29ea5925
-
SSDEEP
3072:5e+D8f9pp4/5h3WjjJvFTvOZMdoPUnbQWu94LH/rCLM83RKVTO0Jtle9oGs2MpEs:lMb2/5h3wJdTvAGrzD/t838Vs6Ms
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 212da55e4f2ca5fe16cb4daa7efbac15_JaffaCakes118
Files
-
212da55e4f2ca5fe16cb4daa7efbac15_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ