Static task
static1
Behavioral task
behavioral1
Sample
fc92b117e543ec66d29c29e9f4793c68_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc92b117e543ec66d29c29e9f4793c68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc92b117e543ec66d29c29e9f4793c68_JaffaCakes118
-
Size
42KB
-
MD5
fc92b117e543ec66d29c29e9f4793c68
-
SHA1
2a3294f33708f17118fc69fe88cc370cb58684f7
-
SHA256
93a9f7235e433ea4ffb027fe84fc78f6e93df15a55e6689cda71d8f7552267b4
-
SHA512
0bc9969cae55efd864f7d8e05c923ebc17118d59d5ecac86f8385694b7072aa7ac63eae431878cfd73b97c0cd0c86475d6305f37ecbcd6f25cb8c1b7d10f3c5e
-
SSDEEP
768:PYMynqb6FoTESJL2wM1gcohpBzA5sX4pPHpIkbFJ1RNPtC1gUOi9cpAr3s:P5aqGAf8wMKVnGjhfXPOFr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc92b117e543ec66d29c29e9f4793c68_JaffaCakes118
Files
-
fc92b117e543ec66d29c29e9f4793c68_JaffaCakes118.exe windows:5 windows x86 arch:x86
272af45dfbe9657ac292672066b27d6f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryI7nfoKeyW
RegEnumValueW
kernel32
Clo5seHandle
Dele6teFileW
HeapAlloc
HeapFree
Sections
.xyfwl Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmd Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pqz Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ