Static task
static1
Behavioral task
behavioral1
Sample
b9add7245a37a4411fa78ebc2fd64b1d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9add7245a37a4411fa78ebc2fd64b1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9add7245a37a4411fa78ebc2fd64b1d_JaffaCakes118
-
Size
155KB
-
MD5
b9add7245a37a4411fa78ebc2fd64b1d
-
SHA1
d0def604da77bb00f93faf74806d03b750d346c1
-
SHA256
4fb091c9933ad4320300b8548762dacd3cce8c4344271f7f862c3964114e58fa
-
SHA512
70988af9db97cf1c7eb7915bac4f257b0b04489d7a3c69536ef48ceb20a7fe2b4fb7ceef89847ebf3040753ff42597a78758af6aad3403a542ca3bfc94fb1c87
-
SSDEEP
3072:A6clsHi2Z6w6GfQRASTZi+0JIUq2Hfq0npc3UQ:A6OAg8aAwd0nEkp2U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9add7245a37a4411fa78ebc2fd64b1d_JaffaCakes118
Files
-
b9add7245a37a4411fa78ebc2fd64b1d_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ