Static task
static1
Behavioral task
behavioral1
Sample
050eca6f9194b45ab5e9a99b5aef0d9c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
050eca6f9194b45ab5e9a99b5aef0d9c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
050eca6f9194b45ab5e9a99b5aef0d9c_JaffaCakes118
-
Size
1.8MB
-
MD5
050eca6f9194b45ab5e9a99b5aef0d9c
-
SHA1
66dc0ca6bc028e244f79e34e47d2247a32c18f2e
-
SHA256
35699cfe98369f1336df6bdb65793623fbb31cac34237dd7feb3361d3493b2cd
-
SHA512
2796d9094bafe7dbb4854e370c15228f23b8a6e2da3ce531abd499b0b57728c07cd745dfcb0697466604b0b619045eda9e4573661273af384c955bf82e36f208
-
SSDEEP
24576:9yfkEXSEe1OfXG05lYsPPuHsEbxD5aK8H2l+ZQeVxA5MHoMxkX/qBoK/ceUEFhn:9naSEe12PPcpbxK0+Zbyyk4oK/cdEFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050eca6f9194b45ab5e9a99b5aef0d9c_JaffaCakes118
Files
-
050eca6f9194b45ab5e9a99b5aef0d9c_JaffaCakes118.exe windows:5 windows x86 arch:x86
71abf9531e2f71f4d7d1f52c5a0e72c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
kernel32
CloseHandle
DeleteFileW
HeapAlloc
HeapFree
Sections
.tcdmj Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ofkfsf Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sbwp Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ