Static task
static1
Behavioral task
behavioral1
Sample
751bb4ec500f898f1ab20afe19efc4c8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
751bb4ec500f898f1ab20afe19efc4c8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
751bb4ec500f898f1ab20afe19efc4c8_JaffaCakes118
-
Size
250KB
-
MD5
751bb4ec500f898f1ab20afe19efc4c8
-
SHA1
5db293116f977820aecef3e6104911d824c7edab
-
SHA256
d33bd303c3996bde3a41b54c570072afcb14d2a08c79d20e149304ef797ea1d8
-
SHA512
b4a1cc7a73c1f6c61a7c2c252810145fc15bb46b9a228178c1dcccb5778209a77982276b006fac40ae5e5001371d1c560c950d6958a46922b28e451de93e79ab
-
SSDEEP
3072:tKRAIV5tZtAgm7GpmD19lGCP7Dw8dR+aa1nCx0r7Vm0rxiBw+nEWq6+ubFByMcww:YRNVfDlaDwka1nCiVmx5b+uBMzLpTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 751bb4ec500f898f1ab20afe19efc4c8_JaffaCakes118
Files
-
751bb4ec500f898f1ab20afe19efc4c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d2b70f89deed700526906374bad7e7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
Sections
.bss Size: - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE