Static task
static1
Behavioral task
behavioral1
Sample
76e330acb8bf0ad9561b2f33358fe117_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
76e330acb8bf0ad9561b2f33358fe117_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
76e330acb8bf0ad9561b2f33358fe117_JaffaCakes118
-
Size
22KB
-
MD5
76e330acb8bf0ad9561b2f33358fe117
-
SHA1
ac238d8d16432516f18303a9af35b997ae912f4d
-
SHA256
e9b7b2797c00c05f2fcd6dceef730fb3f888a96b27aef72d77dca75bd6451311
-
SHA512
439e1795156f1db1b17ff62bee449ac5e7ffee561cc89f54701637edc0158eb9edac656968dd82162d96ddc10a26dfe37183a03db2071368b1f9284d68d99e93
-
SSDEEP
384:6XewqDyME7bZazFRq+ElAhYuGneKeX84LXOlyjRo6WMJm/iIdDHcaQPnP:6OdQvZwFRqQYUKeX84LW2fWz/ik8amnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76e330acb8bf0ad9561b2f33358fe117_JaffaCakes118
Files
-
76e330acb8bf0ad9561b2f33358fe117_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2022d59063a3bee3e08b0792cf5ab79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
select
kernel32
DisconnectNamedPipe
user32
MapVirtualKeyExW
gdi32
ExtTextOutW
advapi32
RegCreateKeyW
shell32
ShellAboutW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ