Static task
static1
Behavioral task
behavioral1
Sample
e72e7584c01eb61b140b8ce1f6d23852_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e72e7584c01eb61b140b8ce1f6d23852_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e72e7584c01eb61b140b8ce1f6d23852_JaffaCakes118
-
Size
63KB
-
MD5
e72e7584c01eb61b140b8ce1f6d23852
-
SHA1
2443ffd78526e6d891cbd8b4b7e44c18b77314ee
-
SHA256
eb9652c346b0d96398937befba28c0c32f4dcad39ce1fad0b94293e4df6d7c2c
-
SHA512
343aa4f01554ea4ef1b6c25ed1b73f81b0997647334e2c0eac553f55395d746cddff656837d4b4baf8701b5635a79a98c44c04eeb0e0fc5852d463dc1e834e4d
-
SSDEEP
1536:om7wjsVTJ+p3JrkGLawHE/E2j+E0Rm8D1hRoZm3IyAq/b:T+sVT45mn/bjn0Rm8DTRoZmFAq/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e72e7584c01eb61b140b8ce1f6d23852_JaffaCakes118
Files
-
e72e7584c01eb61b140b8ce1f6d23852_JaffaCakes118.exe windows:4 windows x86 arch:x86
22423eb3058af0ae47f08ce450d03f43
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
Sections
.text Size: 58KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mztOWLR0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 52B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE