Static task
static1
Behavioral task
behavioral1
Sample
638292264141ad6b3165008496e105c0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
638292264141ad6b3165008496e105c0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
638292264141ad6b3165008496e105c0_JaffaCakes118
-
Size
21KB
-
MD5
638292264141ad6b3165008496e105c0
-
SHA1
9883716af063e2db0c88a22ee2641a21c0453ea0
-
SHA256
eb5a8ec8f4eb0e121692832544e62acfa1541e4b11fb99cd97a4723a70c369eb
-
SHA512
1ab1061d7aef5949ae05b29cacad759bc948a51e1657ba4f94f9197a64a53a400394cbdddc3c99f9e4f220e547ca48d90ef63877c77e427e0cbef102d6ec7f8f
-
SSDEEP
384:VbhpbFy7Q0+kj19ilo65n48nlnawQXRReKOaNs1KgSwZ:Vbsk0+kj19ilo84eoXiV1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 638292264141ad6b3165008496e105c0_JaffaCakes118
Files
-
638292264141ad6b3165008496e105c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
249bd2859816f92e6a65bdb26560339b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
advapi32
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ