Static task
static1
Behavioral task
behavioral1
Sample
bb54f60b3a5da9077138ef8b580c0822_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb54f60b3a5da9077138ef8b580c0822_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb54f60b3a5da9077138ef8b580c0822_JaffaCakes118
-
Size
359KB
-
MD5
bb54f60b3a5da9077138ef8b580c0822
-
SHA1
bcb1afc6dc3f8a6f16132da7586b300e0b748385
-
SHA256
9562832ab62bf7a7863e841e39e386c6195309b67a0e41826a52365f16516295
-
SHA512
5331e96e0179d9705851a1a6854f7fb468e917f200a803461ee155f1b90b664791464749d33ee92754925d12a4090973d2a81580b740b1129d5ba0f5bce8a6df
-
SSDEEP
6144:cbIBmXTYXXX+facktWVOEU7U4GGGte96wDpX+Z9uyNRvNBIweh5gcybQUCdIPf0D:GIBITwTcGWVdmGAEWpOZIynjIVlyT3P4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb54f60b3a5da9077138ef8b580c0822_JaffaCakes118
Files
-
bb54f60b3a5da9077138ef8b580c0822_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ