Static task
static1
Behavioral task
behavioral1
Sample
975e1157a03bef353146e4a3561f4b89_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
975e1157a03bef353146e4a3561f4b89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
975e1157a03bef353146e4a3561f4b89_JaffaCakes118
-
Size
490KB
-
MD5
975e1157a03bef353146e4a3561f4b89
-
SHA1
cc47ac383efeffad22ea6a30df5c4dc45f1c25a2
-
SHA256
5c5c746920d50acfc3c4b6116aa500285e7f961642793369e58f4f923ece602a
-
SHA512
4679c292320473fd7e7afe272d2e8f9ea55244168a3478ff6c21bc437fe664b53ef6502cd6ca5e3c9f9cc1ef5644946ed549b61c15517a18cbf43a161e4b9461
-
SSDEEP
6144:UfBDSvIHTsu7uHZPz1KRvwyan0HrbNxnQ16:UpDSvIHT5gz1KRvwyan0HrbNxnQ16
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 975e1157a03bef353146e4a3561f4b89_JaffaCakes118
Files
-
975e1157a03bef353146e4a3561f4b89_JaffaCakes118.exe windows:4 windows x86 arch:x86
b2c4faacdb3bd623af27296c545071ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyA
Sections
.text Size: 70KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sg Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE