Static task
static1
Behavioral task
behavioral1
Sample
d0d45476570d097ae4463f64197f07b3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0d45476570d097ae4463f64197f07b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0d45476570d097ae4463f64197f07b3_JaffaCakes118
-
Size
21KB
-
MD5
d0d45476570d097ae4463f64197f07b3
-
SHA1
1268d4f87c673a948a7e50419af26d71bee7cc50
-
SHA256
b8c4690ff26a2b217e13e2887e5b39009ea9c865352af0d65b7b1b14debeb91c
-
SHA512
2b9e7f6e6f91276457b56894d6bd4e9b3dec431289fe23d7437eea9113bbbdd6c90a5ea0b0add1aa61e48eb0547c639e15c595434003beda5d4496ca92e30ef1
-
SSDEEP
384:xELpbFy7Q04kIU6ToTXTDQvDnSdFdtN9MaMmmkv7APeE/9uIraw3yC/zjFoZ:+ek04kIUjTTDQvDSddzMIUeE/9V+ajs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d45476570d097ae4463f64197f07b3_JaffaCakes118
Files
-
d0d45476570d097ae4463f64197f07b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
094e685359ef92fd7418934aeaae5633
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
advapi32
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE