Static task
static1
Behavioral task
behavioral1
Sample
e1d7b88abbf24ec40faa3069bbb531ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1d7b88abbf24ec40faa3069bbb531ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1d7b88abbf24ec40faa3069bbb531ee_JaffaCakes118
-
Size
46KB
-
MD5
e1d7b88abbf24ec40faa3069bbb531ee
-
SHA1
3eb86461eda75d35e67d78fe4537aadc3fa85133
-
SHA256
a49c1c7899400db9a2e43b400fd4708f2d384a25b3b79e314f91c313977b5dae
-
SHA512
a92f4baa5f0ea9744a3a77e76db5b6c91d448ebf66e072c41fd697b487c15fdba190c0a7b1633669403dc2d17b606d7f057115dbb284676be0c435afdcd7e099
-
SSDEEP
768:cpjW2eDomcpbW6jCmRBthe2Zqtnrl83TJHmahLK3zaOvq929Bioq3yGN/wEane:U6vDejde2ZqMTJHmacL+33oEae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d7b88abbf24ec40faa3069bbb531ee_JaffaCakes118
Files
-
e1d7b88abbf24ec40faa3069bbb531ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
c068b8d6cd35680bd67c0f9cb998c5c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptGetHashParam
DuplicateTokenEx
RegDeleteValueA
CryptCreateHash
RegCloseKey
CryptReleaseContext
RegQueryValueExA
shlwapi
wnsprintfA
StrStrW
wvnsprintfW
PathRemoveFileSpecW
PathMatchSpecW
StrCmpNIW
SHDeleteKeyA
PathCombineW
wvnsprintfA
PathFileExistsW
wnsprintfW
PathFindFileNameW
StrCmpNIA
Sections
.dep Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.angfap Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.piz Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ