Static task
static1
Behavioral task
behavioral1
Sample
fd92887628663f4d8ff36881384fdef9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd92887628663f4d8ff36881384fdef9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd92887628663f4d8ff36881384fdef9_JaffaCakes118
-
Size
196KB
-
MD5
fd92887628663f4d8ff36881384fdef9
-
SHA1
ca92808f5cea1e2d528faeabb4cee613c2218d43
-
SHA256
f50f539f8d1f7edc2cb1555ded652be7ffa0f966c56e6dce08f0ca2950488b12
-
SHA512
9e36bcb4914d8749615cf6eea55a14a2f959aa6e309a88ba00a5a6553483bf45fa276fd8cf911afccd981d67c2f6846d361cb3c7258dbe8e56964d03594d9c95
-
SSDEEP
6144:rTP4+5DUitKWQzCgJ1xB9V+PY9Ph9Nk+2i6wh/MIl:rjF5DUwKRjdgahr1hRl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd92887628663f4d8ff36881384fdef9_JaffaCakes118
Files
-
fd92887628663f4d8ff36881384fdef9_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ