Static task
static1
Behavioral task
behavioral1
Sample
3182bfd14b5db6971115d895bedfbb61_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3182bfd14b5db6971115d895bedfbb61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3182bfd14b5db6971115d895bedfbb61_JaffaCakes118
-
Size
39KB
-
MD5
3182bfd14b5db6971115d895bedfbb61
-
SHA1
5cc8cfee40c69cc0cbf22c08e69f617b48cb96b5
-
SHA256
89479f2054897f5816be4bba86cd4bcd1355d6701239eeae9abf9aa2eda049c0
-
SHA512
ac28337bcfd5f963a70ff9db12855ea9f7240bb5f6fcc1b2e92562f72692a6a792c7a07c67cf5bc70112273612c8b9acaa349e294200836e1b21423f87245c37
-
SSDEEP
384:M/JWEllANvQTOznKifzHvcbI3xvxTAISJb0+g5Huo6v42ia/H8FvBpOFd60z+wZk:vElsBDZpweh4AvakFZIL8WiYRT+Mc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3182bfd14b5db6971115d895bedfbb61_JaffaCakes118
Files
-
3182bfd14b5db6971115d895bedfbb61_JaffaCakes118.exe windows:4 windows x86 arch:x86
7401930175fb1511c6ba88ddbfbc5d08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueW
RegQueryValueA
RegSetValueA
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyExW
RegSetValueW
RegDeleteKeyW
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ