Static task
static1
Behavioral task
behavioral1
Sample
d70450611255f6ffe9f131d0fc8dd111_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d70450611255f6ffe9f131d0fc8dd111_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d70450611255f6ffe9f131d0fc8dd111_JaffaCakes118
-
Size
195KB
-
MD5
d70450611255f6ffe9f131d0fc8dd111
-
SHA1
3ee64e16a84baf2da664b5f980b2028a67e58030
-
SHA256
ec25be0afb915a58c26a27943edc917e0fd1575cf7931c64545844e2ea5c8fcf
-
SHA512
711668ef31f6ab8dc732d972f90a86a2031e4f8139c8a0733968d71801b7a13a4f7f7e683281c2ca0830756a3e590da8165625bbfa3a38bc53ac395bb93ca195
-
SSDEEP
3072:E000mBDN+Uf0BgXjwHF64WnkaZSRpwG3IQuHeHE7prGVGj1uWGqooa:M0md+GXjg67nkaZSRpjuHeHG5GVyGqoZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70450611255f6ffe9f131d0fc8dd111_JaffaCakes118
Files
-
d70450611255f6ffe9f131d0fc8dd111_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e82ec68160bd8fb2faf76c8dc0232f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadIconA
msvcrt
_exit
advapi32
RegOpenKeyA
Sections
. Size: 142KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE