Static task
static1
Behavioral task
behavioral1
Sample
f6bac464369603ee74b80e7365831cf5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6bac464369603ee74b80e7365831cf5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6bac464369603ee74b80e7365831cf5_JaffaCakes118
-
Size
40KB
-
MD5
f6bac464369603ee74b80e7365831cf5
-
SHA1
b35ab08af04f40add595d27f2c691c3aacbd5ab8
-
SHA256
45a9a4479f8c559bdf3d7bc4e8c36b966511f3fc57bd5835201cc3cddf7ddf05
-
SHA512
5d78ec8eaed8995cc6df49aa21a7e90357305f6b20e29e567b415978736afe02e12b4ae23a0f3e0bc4c21e7231b1e2826dd0bfcc537467f505ab6b4a50292231
-
SSDEEP
768:d1H8iNsY4WJsPE2rFruBw5CshvslMEqM26b14wWlXBkpVYtkII8:dR5sY44BGlsKM1CXhkI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6bac464369603ee74b80e7365831cf5_JaffaCakes118
Files
-
f6bac464369603ee74b80e7365831cf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
920dffc5707097917c827d68f1f03a06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetWriteWatch
user32
GetInputState
advapi32
RegFlushKey
Sections
.text Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ