Static task
static1
Behavioral task
behavioral1
Sample
5bb68cbc88a927f2399e0b5404fe9368_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5bb68cbc88a927f2399e0b5404fe9368_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bb68cbc88a927f2399e0b5404fe9368_JaffaCakes118
-
Size
48KB
-
MD5
5bb68cbc88a927f2399e0b5404fe9368
-
SHA1
2e321e5a77658492932a3fd58cb8ea3a38edda89
-
SHA256
b6c7ae9985097367e00bbf60d1436a7d52afafd26a931ef9523643fc533ce24f
-
SHA512
ca76e4c550e4a9ef6ce88d742d84f72c333b8ee361caece7f73de6754fadd2bba37bbd2d0ea609f6356b2a1ee86bab1647b5226ba48523f81c39fa76bfe4c712
-
SSDEEP
768:5UzZqNeSIAaE6EtzwuZDfDc8iTEc38Z0D6Z878OHQxVE0kCSiqyLeCDyBrIBN4sI:qVqMSgow0Lcyc1Dc8NCZSirx8rS4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb68cbc88a927f2399e0b5404fe9368_JaffaCakes118
Files
-
5bb68cbc88a927f2399e0b5404fe9368_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7331c189fcb69ed9c94f488f7a41fd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BaseQueryModuleData
GetProcAddress
GetModuleFileNameA
GetNamedPipeInfo
GetModuleHandleA
Module32First
VirtualProtect
WaitNamedPipeA
VirtualFree
VirtualAlloc
ws2_32
connect
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.code Size: - Virtual size: 144KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 47KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE