Static task
static1
Behavioral task
behavioral1
Sample
5b419657e91326bb15dc2a2136d428b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b419657e91326bb15dc2a2136d428b7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b419657e91326bb15dc2a2136d428b7_JaffaCakes118
-
Size
18KB
-
MD5
5b419657e91326bb15dc2a2136d428b7
-
SHA1
29d1c7ca62d2effe5a94fedbcb17089544b6c02a
-
SHA256
6bfbffb0f6ae19b64c610fd76962f64e43b0dd2c177142afb8a40b5a48ee1c5f
-
SHA512
3adfea595e137cf50daa856284c316e17a9742537b816bb58c9e09b9130307c28b40207b6d589c2d8095fb78fbb870149aa4d01fc56a32b0592292cb074e5f38
-
SSDEEP
384:SKgBaaEcIY3xi3PPBwfiqTO8YmoivssycUPSNFRg0h/W0cuLx76V:+otiBi33BBmQmoivAcUCFR3W39V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b419657e91326bb15dc2a2136d428b7_JaffaCakes118
Files
-
5b419657e91326bb15dc2a2136d428b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
46369cf48b1141339da61c6d2be36b20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE