Static task
static1
Behavioral task
behavioral1
Sample
c8b7e1a65b296abfbdb4a9a049005c26_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8b7e1a65b296abfbdb4a9a049005c26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8b7e1a65b296abfbdb4a9a049005c26_JaffaCakes118
-
Size
788KB
-
MD5
c8b7e1a65b296abfbdb4a9a049005c26
-
SHA1
eb53770d122432c42b1f66f9a1b694295bfc8ba7
-
SHA256
054f0008ecabda139a6c1e0cdc3171395df89a464690ed037ecd14e6e82959bf
-
SHA512
baadf667d1fbde66156d4e76dcfa165f2621ebccf7adde2f074d3270b55fde2c6affe68e39373405bf1511ddae20eb20572f1d2c6dde6ac221313d0c8ca16397
-
SSDEEP
12288:68CgGSdw2tDaqpN4hCiKhMC0Jh0+i/nH8e/IuR76rjIk92kRCy8rBPIj2BVS:68f7tDZSC/hMC0J+ZfFKjIQoftQMVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8b7e1a65b296abfbdb4a9a049005c26_JaffaCakes118
Files
-
c8b7e1a65b296abfbdb4a9a049005c26_JaffaCakes118.exe windows:5 windows x86 arch:x86
71abf9531e2f71f4d7d1f52c5a0e72c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
kernel32
CloseHandle
DeleteFileW
HeapAlloc
HeapFree
Sections
.vcpib Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ryv Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fyhef Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ