Static task
static1
Behavioral task
behavioral1
Sample
daf86760652cec164a8c98e3c655931d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daf86760652cec164a8c98e3c655931d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
daf86760652cec164a8c98e3c655931d_JaffaCakes118
-
Size
247KB
-
MD5
daf86760652cec164a8c98e3c655931d
-
SHA1
2a15f161f2c9151f8a959c398bdefb60bcb9d046
-
SHA256
b3655a2249fb87959a1a2bd5e631e538f7d242abc6f75044af35f775895cd2a9
-
SHA512
abca6341fa8104304d42723bd8aa879633c61901f04ef60acbc575e55473ad47c5ec2d455d69d1eb9853fac9d59fae892459359b24ed51e4fd4dde2e851996b1
-
SSDEEP
6144:jH9sQwOok0xZ3jTj90fqgemkjKIXq+JCeMTGZEWiyy:jHN07hgeX239cEF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf86760652cec164a8c98e3c655931d_JaffaCakes118
Files
-
daf86760652cec164a8c98e3c655931d_JaffaCakes118.exe windows:5 windows x86 arch:x86
7d9c1766fba49ec0abf5d1884be7dc70
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CloseHandle
DeleteFileW
HeapAlloc
GetSystemDirectoryA
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
IsTextUnicode
RegEnumValueA
Sections
.tmxaj Size: 36KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fongn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hizov Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ