Static task
static1
Behavioral task
behavioral1
Sample
11e253b5164dcba5552db2e92c50c838_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
11e253b5164dcba5552db2e92c50c838_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11e253b5164dcba5552db2e92c50c838_JaffaCakes118
-
Size
42KB
-
MD5
11e253b5164dcba5552db2e92c50c838
-
SHA1
f9dd119a2e79ed1db6087cf87e8d1078cf2252ff
-
SHA256
cdb09770644a939f52641ca080901a5a7e9c66cd7e1ba53a8ddab1ec4b29727b
-
SHA512
b9ae1d7f6007601418a2e0b94e4022d1f4469ce46f87496668daf1890988888d3d5df51fc8628b36147679379fe68064b4a1754a48f814330e019db65786cbee
-
SSDEEP
768:nMynqb6FoTESJL2wM1gcohpBzA5sX4pPHpIkbFJ1RNPtC1gtv9cpAr3s:MaqGAf8wMKVnGjhfXPOe8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e253b5164dcba5552db2e92c50c838_JaffaCakes118
Files
-
11e253b5164dcba5552db2e92c50c838_JaffaCakes118.exe windows:5 windows x86 arch:x86
272af45dfbe9657ac292672066b27d6f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryI7nfoKeyW
RegEnumValueW
kernel32
Clo5seHandle
Dele6teFileW
HeapAlloc
HeapFree
Sections
.fgb Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cnqtat Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xyzat Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ