Static task
static1
Behavioral task
behavioral1
Sample
5fb1e03a456afef95e649623e011eb99_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fb1e03a456afef95e649623e011eb99_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fb1e03a456afef95e649623e011eb99_JaffaCakes118
-
Size
48KB
-
MD5
5fb1e03a456afef95e649623e011eb99
-
SHA1
6c50657c79ae3ff21b74159b80d0b59c3fb1c7a5
-
SHA256
f4f05ce1865852ba161630b375592e7727c6526c8d1d4f8991780de2c7ea3721
-
SHA512
7585e4dd5f0edc67c8d3f23f51851efd0b9a4ba15267ed69e9a55f19cfd603a4e9a24f25c15ac7bd7ec20194b0620e512c9837ffd7be3ae4b76bbc4ffe52504f
-
SSDEEP
768:du72Nz94atJCpPpSp/duSdq935uj/ZNyDgef0CphpOxiFcW3SzNKdIDN9QERUKSl:Y2zsy9duSgbl1hrSRZNG6UKSfpD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fb1e03a456afef95e649623e011eb99_JaffaCakes118
Files
-
5fb1e03a456afef95e649623e011eb99_JaffaCakes118.exe windows:5 windows x86 arch:x86
ac084a136d5e32b3793b93373eb57666
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathMatchSpecW
wnsprintfW
PathRemoveFileSpecW
wvnsprintfA
PathFindFileNameW
StrCmpNIA
StrCmpNIW
wnsprintfA
PathFileExistsW
StrStrW
PathCombineW
SHDeleteKeyA
wvnsprintfW
advapi32
RegDeleteValueA
RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptCreateHash
DuplicateTokenEx
CryptReleaseContext
Sections
.xip Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yduv Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hat Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ