Static task
static1
Behavioral task
behavioral1
Sample
74f8f96e9380fbae5d4397211a9d55a6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
74f8f96e9380fbae5d4397211a9d55a6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74f8f96e9380fbae5d4397211a9d55a6_JaffaCakes118
-
Size
40KB
-
MD5
74f8f96e9380fbae5d4397211a9d55a6
-
SHA1
4434370053e4e7a62d97113ff0fc5daa3836f637
-
SHA256
23972a13cdd84ff88bca8397bf0ac6a99841fbcc8b4e5c2dbc993344739cb828
-
SHA512
d6303a02102eb6e005a8d8ff6eeb90d635db008d19e59c6c47fa6d4806bce421e12fdf38d26951202dd9c16d0ca1ec8e5bf260efbcfa56cd436e3238c5ec9342
-
SSDEEP
768:D/EJzVHnb/1y5hcumTLHW6nL6JoHHaOwmCUwx0IsHVsbtn:rEJzh/1USumv/L6J5ObCDLwVK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74f8f96e9380fbae5d4397211a9d55a6_JaffaCakes118
Files
-
74f8f96e9380fbae5d4397211a9d55a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
64aa0b09e92d973d6fc5b5f91734efd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
netapi32
DsGetDcNameW
kernel32
VirtualFreeEx
GetCommandLineW
advapi32
RegFlushKey
Sections
.text Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ