Static task
static1
Behavioral task
behavioral1
Sample
01896952bc739f8dd9b3826c142e6399_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01896952bc739f8dd9b3826c142e6399_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01896952bc739f8dd9b3826c142e6399_JaffaCakes118
-
Size
39KB
-
MD5
01896952bc739f8dd9b3826c142e6399
-
SHA1
fbe649dc44225685a1cde851af3227b57f6babf3
-
SHA256
c42d6c014f3606a77e37662ed9745c98192cf7fc2c796dbeebd5c1ba27c4f453
-
SHA512
8a1d18b76fc10b559d66a41eadc44a00759a022d418f6e16014ca8962ef5ba85627547becdc208601ca95d4ab269bbf7faecfc26e3f9eff19a292c5a2211ed1a
-
SSDEEP
768:t2pKMLv3uao8KGWgXthl64lNKtY1XaTyO4rZrjgYs6M1no8:Ar9KgXfDcTsjxjd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01896952bc739f8dd9b3826c142e6399_JaffaCakes118
Files
-
01896952bc739f8dd9b3826c142e6399_JaffaCakes118.exe windows:5 windows x86 arch:x86
773d45c1468496235f40d0936a1c1a06
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetServiceDisplayNameA
Sections
.spgtqh Size: 33KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pob Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nqz Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE