Static task
static1
Behavioral task
behavioral1
Sample
bac2a16de867790ed919963cfcdc218b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bac2a16de867790ed919963cfcdc218b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bac2a16de867790ed919963cfcdc218b_JaffaCakes118
-
Size
54KB
-
MD5
bac2a16de867790ed919963cfcdc218b
-
SHA1
5caa4d255afbc88896dbadeeeedfc8dff39e5253
-
SHA256
cbaa76b4862d0ee5cdbf0d0796af0a16db43585568b81133b8eac593a07ba6c7
-
SHA512
9203b2e4ff92e96e34ec99b6bb1b51f86452b2f5c38f93a374d121cb518c1c31eb0d1b737e9a79cac50f5f88a1088408d3c9986a43d32b73a5e2ddb9415dbebc
-
SSDEEP
768:6sXnlQUUJur9ayFE1sL0N+zVXtYuyZtO6M8rdL5l75hkyaPP7g4xuko4Eu:ZQUU4p6oYaIl5xxM7gwuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bac2a16de867790ed919963cfcdc218b_JaffaCakes118
Files
-
bac2a16de867790ed919963cfcdc218b_JaffaCakes118.exe windows:5 windows x86 arch:x86
7e6f8f23f807eb2cf1ad37ddd62d3862
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
wvnsprintfA
PathFileExistsW
wvnsprintfW
PathCombineW
StrCmpNIA
SHDeleteKeyA
wnsprintfA
wnsprintfW
PathMatchSpecW
advapi32
CryptDestroyHash
RegQueryValueExA
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam
RegEnumKeyExA
GetUserNameW
RegCreateKeyExA
RegDeleteValueA
kernel32
FindNextFileW
Sections
.argnkz Size: 44KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.enqnir Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ixqktu Size: 6KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ