Static task
static1
Behavioral task
behavioral1
Sample
b70c4db1be756813c7d557bfff899091_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b70c4db1be756813c7d557bfff899091_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b70c4db1be756813c7d557bfff899091_JaffaCakes118
-
Size
39KB
-
MD5
b70c4db1be756813c7d557bfff899091
-
SHA1
6b9599079887a6c583ff2fe41dfe9a712cc30a80
-
SHA256
41c0b86462ce3bd1a28d649f41f9ef65094fd7b28fd9f39cccb6f7647bc0888a
-
SHA512
d29386cc42ac792ae149ecdae280830c5c8b2b4553190922e45c11471ccdc19ef521350b0ee2ae5a2afe6a8341da5b006c859e89f8ac35e6d4325c0ca74ed0d5
-
SSDEEP
96:z0W4wBmsEZ9RIKRblReYz7GeFkXNNQvNz3pbU/p1BI:QWzIvXZlReY/FkXNNQvNzGp1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b70c4db1be756813c7d557bfff899091_JaffaCakes118
Files
-
b70c4db1be756813c7d557bfff899091_JaffaCakes118.exe windows:4 windows x86 arch:x86
094e685359ef92fd7418934aeaae5633
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
advapi32
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ