Static task
static1
Behavioral task
behavioral1
Sample
c9765d9359404d78da671d10f5d1dac5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c9765d9359404d78da671d10f5d1dac5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c9765d9359404d78da671d10f5d1dac5_JaffaCakes118
-
Size
399KB
-
MD5
c9765d9359404d78da671d10f5d1dac5
-
SHA1
bd24447cf21ee52862aff42b665e4964307c8a8d
-
SHA256
d2299a2a0a74f66cd5f1253427c9684b7a1b939d251caed58c29d3682ea1f408
-
SHA512
16f544cdf051f4a9501da0ddd715d103f9db5c76d008604fc2fba77e745811fb6538142b9cc6851df79e653cf1b431f60fcb047d94673a33070659640bf767c4
-
SSDEEP
6144:6xCU6FnNLc0G17r1tJc4vPo2NfQmL2zZsisfimHqLTm7xauel+UcE2TuX0QF2:6xP6FnTMdrBPo2GmysKmKLTmnetAuE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9765d9359404d78da671d10f5d1dac5_JaffaCakes118
Files
-
c9765d9359404d78da671d10f5d1dac5_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ