NvSetUp
Static task
static1
Behavioral task
behavioral1
Sample
fdc11b0cd869eaa7619518bce86cefc9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fdc11b0cd869eaa7619518bce86cefc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdc11b0cd869eaa7619518bce86cefc9_JaffaCakes118
-
Size
18.0MB
-
MD5
fdc11b0cd869eaa7619518bce86cefc9
-
SHA1
e4fbbc53d46c2ac54b7fa4f70dcc8f2461ac4196
-
SHA256
aa0257028c0b67016ac4e1685b5fd2e92c0ba1f0fba00c157928c26b7b6c200b
-
SHA512
04f294995969f055d89c486e826422c0ac658870588f9d34b996d29273255d1e8f6a7dac684ed448ccbea51f9f12e83141deb8841fd220315d0384243ce58ea0
-
SSDEEP
384:FAs5z4qcuTGUahfPdOUXhOtracU7nJgwuSwg2XXwMkihos3wxDoAm827VehuUPz:isPEflRROtracMoBXthz8oRh7VEr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdc11b0cd869eaa7619518bce86cefc9_JaffaCakes118
Files
-
fdc11b0cd869eaa7619518bce86cefc9_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c8ee6563ff7c1475ccba8941a54bda1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
memset
user32
TranslateMessage
advapi32
RegQueryValueExA
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 18.0MB - Virtual size: 18.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE