Static task
static1
Behavioral task
behavioral1
Sample
de73163e40a5e652a33b5377c6f29b4f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de73163e40a5e652a33b5377c6f29b4f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de73163e40a5e652a33b5377c6f29b4f_JaffaCakes118
-
Size
32KB
-
MD5
de73163e40a5e652a33b5377c6f29b4f
-
SHA1
8a59220996cbd9e22e3c5e038e6093a805d91554
-
SHA256
8a51106bb1418c5b132adfa3796b4ed8b681686fd3d077533e99f2774d47e1c7
-
SHA512
e566b0af1741cba56ba06cd77802d39ad84bcd847f551fc070199e0ac14b5652b13916d2d8e8b6342fc3ee01f26587f45615fc319ceffd897fa4929f316f66e4
-
SSDEEP
768:SHOcTNEDYvDtZ3EKcXnLLzTSddvncNtD/ouHjDfjYSx:SHVTNEDYvDtZ0dXXzHDAuHjDLYq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de73163e40a5e652a33b5377c6f29b4f_JaffaCakes118
Files
-
de73163e40a5e652a33b5377c6f29b4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
3df1f99e0a4d30c20f18a332f811f908
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegFlushKey
OpenServiceA
kernel32
GetVersionExW
user32
CharPrevA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE