Static task
static1
Behavioral task
behavioral1
Sample
4c642325b7134995a8df1bf82e09fba0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c642325b7134995a8df1bf82e09fba0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c642325b7134995a8df1bf82e09fba0_JaffaCakes118
-
Size
588KB
-
MD5
4c642325b7134995a8df1bf82e09fba0
-
SHA1
04ce4bd667ee761f562d50ccefd144fa9366dc13
-
SHA256
6a869e78cafa65289fa92d7d57a7023cd4c0cc81a6f361699ae1fb841f8640e5
-
SHA512
b6e7b81a1b3bcafdad7ac1a753f69ae7f7bb99661145499bba6f2f2265ff4472cd78550800d00d2f6c2ec85db49a13e688a42dcd83d3c48886acd5da2555a066
-
SSDEEP
12288:P98Q2y7Gqf+AlSIpEy8fGRG346cocZr9rIsCZ0OZtA5d37:F83qf+AAxf4foKrBMaX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c642325b7134995a8df1bf82e09fba0_JaffaCakes118
Files
-
4c642325b7134995a8df1bf82e09fba0_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ