Static task
static1
Behavioral task
behavioral1
Sample
790f24b5d66445b4f79b2ef7fdcb5f5e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
790f24b5d66445b4f79b2ef7fdcb5f5e_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
790f24b5d66445b4f79b2ef7fdcb5f5e_JaffaCakes118
-
Size
139KB
-
MD5
790f24b5d66445b4f79b2ef7fdcb5f5e
-
SHA1
9e969c0876285478f3bc78a5e68d98d05561e52b
-
SHA256
1ef1c5b2b04f6dfc696ffab88c5c520ea3fddb2d284a87faa2570ee687150409
-
SHA512
9fc163cbdb8d87a0cf0cdeda79a4921dd1bc6211bdbcc72ae0a9912104ddff54194943bd3d933d20582bd53e2cd9461607c3b1573d5d1a1cb55d5aff507ee963
-
SSDEEP
3072:qS8GTC238/jAGDmxoLQvzqzjqD7YdU4EptGr04iZEUJYySoQSLwMR6EI5e:zT0/jACmuJzjqXAU4sGr0dbJ+hTMwECe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 790f24b5d66445b4f79b2ef7fdcb5f5e_JaffaCakes118
Files
-
790f24b5d66445b4f79b2ef7fdcb5f5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
69ffd393605d7736db3139f1c25f53a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE