Static task
static1
Behavioral task
behavioral1
Sample
892495b8e8ae04dec6f5ea862d627ca8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
892495b8e8ae04dec6f5ea862d627ca8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
892495b8e8ae04dec6f5ea862d627ca8_JaffaCakes118
-
Size
684KB
-
MD5
892495b8e8ae04dec6f5ea862d627ca8
-
SHA1
42ff54d5db04a362aea7ff42ca506399138ec0d4
-
SHA256
b9b59db627931beb7b427ef6f438a3d0bf74b98e4cad42d2cba709ba9c597c52
-
SHA512
1ef41117a89cb79e5e34053b8fb8f19d547ef4a1e7799033c7b3eaee828da0980fc106ee847144a594d68020a4be0b730ebf2bc237f5cc14560491b47426620c
-
SSDEEP
12288:l5GquaHgOO0d9jscBD07rIvserbi1+Kcm6nrw5Nd7iNwMtMPd0rkggJaflyZQ+W:3Gqu5O7dycBD0f2Rrb4+KQnrGN509s0h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 892495b8e8ae04dec6f5ea862d627ca8_JaffaCakes118
Files
-
892495b8e8ae04dec6f5ea862d627ca8_JaffaCakes118.exe windows:5 windows x86 arch:x86
5152ae5655381d7ec3cf0cfbff896ac8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
CloseHandle
DeleteFileW
HeapAlloc
SetConsoleMode
advapi32
RegOpenKeyExW
GetPrivateObjectSecurity
IsTextUnicode
Sections
.hkt Size: 38KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zmvij Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xkxmn Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ