Static task
static1
Behavioral task
behavioral1
Sample
e128c7fcf58449b4a09cd788da1e9ecc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e128c7fcf58449b4a09cd788da1e9ecc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e128c7fcf58449b4a09cd788da1e9ecc_JaffaCakes118
-
Size
196KB
-
MD5
e128c7fcf58449b4a09cd788da1e9ecc
-
SHA1
852e4882354d01c7e24787253a69f96a4858e5ec
-
SHA256
6345928c0343ea3bff5b4a7e410528a2b990bef19cddeb248284f09a38b04a85
-
SHA512
35dffcaefc04023934b670992d60089f8a247f1afb08bed372ecabdbd2b2b64f31c3e0ed32c8ce170c8e8c0a8f68cc284d44000bcea510ad409439b1c5595c79
-
SSDEEP
3072:25a2gf0+oN+aASwHbw5ZNGZ6vnw+hDvpi4QWi/K51mnyvpzFP+wtkQBdogC:2Q2SIkatx3Nw6vn5DBvQdJnyvpzdQgC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e128c7fcf58449b4a09cd788da1e9ecc_JaffaCakes118
Files
-
e128c7fcf58449b4a09cd788da1e9ecc_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ