Static task
static1
Behavioral task
behavioral1
Sample
a40764cbab8fb25a262791adaf4a272b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a40764cbab8fb25a262791adaf4a272b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a40764cbab8fb25a262791adaf4a272b_JaffaCakes118
-
Size
87KB
-
MD5
a40764cbab8fb25a262791adaf4a272b
-
SHA1
aa41cf28eb4edea6c177f9357828273e448a8ffd
-
SHA256
efdf1c7ca122284231f2a5f354735d6013e85f360a749bccce9d1ab5838d9ef0
-
SHA512
7bc03bef7bada97483c761c2d3f0cb31ce4ac671b7cc3a8cb5c05184d0b915befd93dbef45ee5b481c67c3ae02b84bcb36a97ff51feb8f46643bdff7d3e4ba58
-
SSDEEP
1536:/lumoC3UIrPl0OQKuGe6Gy1S/0lryCez+ausXDK5msiiLXXTEtn5SYREYgTp:tu9C3hOOQbDHKS/0l+hsCiLHTEt5SYRE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a40764cbab8fb25a262791adaf4a272b_JaffaCakes118
Files
-
a40764cbab8fb25a262791adaf4a272b_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 75KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE