Static task
static1
Behavioral task
behavioral1
Sample
ce569e572cad24deaa2fcd9ca840d77e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce569e572cad24deaa2fcd9ca840d77e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce569e572cad24deaa2fcd9ca840d77e_JaffaCakes118
-
Size
264KB
-
MD5
ce569e572cad24deaa2fcd9ca840d77e
-
SHA1
2fef6ec1b0b33af2fdda5f51291829f45aa564fe
-
SHA256
06decc5e4018eda26e674785a857c36ea0d1afb729516a33b53a8e9298497738
-
SHA512
ed42a1b7f8faf41e27c69e6cda37e62df0acb62ebd116e3f2b00d033bf54c664f5da9950df3ea1968c0e78fffd13a12f62948df58bd06f9ae3e48fdfa79406ab
-
SSDEEP
6144:g06Y+6Pydnok5lqpjJb7oIjHXfeczkvBpf8cf71GvBpUbrhrZu:g0BqdnZulb7bDecz+f8cFhrZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce569e572cad24deaa2fcd9ca840d77e_JaffaCakes118
Files
-
ce569e572cad24deaa2fcd9ca840d77e_JaffaCakes118.exe windows:4 windows x86 arch:x86
dcef1db52ec4f4ef3424704935717c43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadBitmapA
advapi32
RegCloseKey
RegQueryValueA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 259KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE