Static task
static1
Behavioral task
behavioral1
Sample
5f38f8128b2c4f5b4e5d466db535bfb1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f38f8128b2c4f5b4e5d466db535bfb1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f38f8128b2c4f5b4e5d466db535bfb1_JaffaCakes118
-
Size
40KB
-
MD5
5f38f8128b2c4f5b4e5d466db535bfb1
-
SHA1
a54b38cb0a726678e52b629b27617849db3d7629
-
SHA256
96e94f97b078d0bfd134ac21aaa080beaef1b092336440e14f9929df336e07fb
-
SHA512
ff13097912412d1e662e7d9df5daaa1ee6f22761705143338bdd805d8b2b1fcc585ad33c7ef3fbf29d7af3a9cb076dacc3a77c144bf84e61ed089aafcfc3f1e7
-
SSDEEP
768:AQFrO65xmyuB02zNUn5RCa1aDLPziYfOa+uG1rtNShDxUa6ea:ACy6vnp5E9DLOkiZxNmDSea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f38f8128b2c4f5b4e5d466db535bfb1_JaffaCakes118
Files
-
5f38f8128b2c4f5b4e5d466db535bfb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
e3faf545cdbcf301e70278934021f985
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetWriteWatch
advapi32
RegCreateKeyW
Sections
.text Size: 1024B - Virtual size: 842B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ