Static task
static1
Behavioral task
behavioral1
Sample
61fc13788c1426dfd82d899158531466_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61fc13788c1426dfd82d899158531466_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61fc13788c1426dfd82d899158531466_JaffaCakes118
-
Size
9KB
-
MD5
61fc13788c1426dfd82d899158531466
-
SHA1
f4e6abb3c1132b67d19a90f93e1736f3538720b0
-
SHA256
f9df38d281a22709c337aca41b9ebbee17d4524b0ed4d23a76d0a342bac82150
-
SHA512
381acfc5e1a1ba5a5c9a1c88c008f9b985c8e609cebca6d42da8c4ce53a3d5857df71e3a00f559d883a6ce8521c3c89ec6af1a7a3e200873f56857766b8d1d2a
-
SSDEEP
192:ZVVPP7kOhXaBNWPJqzQCXYE+kift1mn7bp:DVPP2NgTCXckil1mfp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61fc13788c1426dfd82d899158531466_JaffaCakes118
Files
-
61fc13788c1426dfd82d899158531466_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ac8207e43ff82b5df900d53f6b7d113
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
WriteFile
lstrcatA
shell32
ShellExecuteA
advapi32
RegCreateKeyA
RegSetValueExA
Sections
.text Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE