Static task
static1
Behavioral task
behavioral1
Sample
6f851473c49ef6e0d6c298dd7e87bdce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f851473c49ef6e0d6c298dd7e87bdce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f851473c49ef6e0d6c298dd7e87bdce_JaffaCakes118
-
Size
40KB
-
MD5
6f851473c49ef6e0d6c298dd7e87bdce
-
SHA1
8660185b3e272b71bbcd724547b7affa7429bc6f
-
SHA256
ea63229d4767a57339e1930b09be0c56df33db7640bc1dc4a297f8d617df3ea7
-
SHA512
9289561e6b91a0c3b88bddd405c6bd17c5badc095d1527d4c6ad9722bd0ef4b6cd67a2d175d85c14b390b40ff09aaa7612692a4eb04f40b26fd84cdced00b377
-
SSDEEP
768:/ezt2NX8mBDumEsRRcb7y3DiR1MFGf7jHQiK1ZUKUQ2bKim9Z:Wzt25lyvHqiPT7jHQr16Xh+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f851473c49ef6e0d6c298dd7e87bdce_JaffaCakes118
Files
-
6f851473c49ef6e0d6c298dd7e87bdce_JaffaCakes118.exe windows:4 windows x86 arch:x86
cd7f607e1ad93574abd6cd9931ac0494
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
advapi32
RegCreateKeyW
Sections
.text Size: 1024B - Virtual size: 874B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ