Static task
static1
Behavioral task
behavioral1
Sample
a7c83ccc893d17ac75abdb9ab920bc68_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7c83ccc893d17ac75abdb9ab920bc68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7c83ccc893d17ac75abdb9ab920bc68_JaffaCakes118
-
Size
41KB
-
MD5
a7c83ccc893d17ac75abdb9ab920bc68
-
SHA1
994953ba4f953e03e21e7decf98879c66ba039bd
-
SHA256
e4ed5ed7d0a158714a9fb950c65d9af05188a7e6a483e5a92b9b7367cf4fac25
-
SHA512
79b2b5cb4be14559b340c000c87176c9e2af90d4ca2c7d0c64d1dbc9f01e527deba1ee3c388873118520b672435778a728fbc3396ad0acd7702eba1c415c896c
-
SSDEEP
768:Kr6qj2CbAzRYo8D+NvAVDKA+V5iv+74nkRmsCB+WQ6H8w+FpQ1uMwe1bKqn:Kj9ZlavOKAbvkRRQnp8pq191bKqn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7c83ccc893d17ac75abdb9ab920bc68_JaffaCakes118
Files
-
a7c83ccc893d17ac75abdb9ab920bc68_JaffaCakes118.exe windows:5 windows x86 arch:x86
7eaeb8de82ab2c893d1195e30cc60321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateToken
Sections
.ylgf Size: 34KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ngn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kzcx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vkd Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE