Static task
static1
Behavioral task
behavioral1
Sample
f526532f3826b9f16aed709deb869fb7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f526532f3826b9f16aed709deb869fb7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f526532f3826b9f16aed709deb869fb7_JaffaCakes118
-
Size
40KB
-
MD5
f526532f3826b9f16aed709deb869fb7
-
SHA1
316e727e1905ca41310d00719de96b5ae403d70c
-
SHA256
720c3729193c38e51c1083dcaaeaa325cf6963f325855569fedc4c7a88e867ac
-
SHA512
ee92a0a94b3b6c1150c8b6dd738c85931ac3e603345d7f08f25d3c5f53f59355dcb2d296ca63ab65cb8daaa3b47286e8bff2fe62c49ff6766d19f13c79d5c049
-
SSDEEP
768:AgXkf47PoO0aOEHsRdHhOLZaSdF2UUjdCpmIDM0Y1cD9h:A1fOiREzLvSdCYzcD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f526532f3826b9f16aed709deb869fb7_JaffaCakes118
Files
-
f526532f3826b9f16aed709deb869fb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
75ff04060316179f8578527c39cf0580
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetIpNetTable
kernel32
GetProcAddress
GetLastError
VirtualAlloc
VirtualFree
ExitProcess
CreateThread
CloseHandle
LoadLibraryA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE