Static task
static1
Behavioral task
behavioral1
Sample
1598c57bcc89aa415d0dacba17860d80_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1598c57bcc89aa415d0dacba17860d80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1598c57bcc89aa415d0dacba17860d80_JaffaCakes118
-
Size
543KB
-
MD5
1598c57bcc89aa415d0dacba17860d80
-
SHA1
6ae8062d0b7bd369f7ec3e0ef9dcad52db6ba49e
-
SHA256
38907d0a88465955142eaa2f1656c2b266435c0176edc22fad38ce242b7b1871
-
SHA512
c66c9f81a88fb2886d6cae942c6833ce28cccd97456029bee3d337e2a0c57a4f6c3698deb8d07c3f2542c4df57e18a815a7168901741b5d2ea3c29dab91971ed
-
SSDEEP
12288:UHAE33lSmuHz74fAuSYxWkGAZRQJkQKX2EHc5NJzqZlVxx:UHd3VzuT7uBZWNy2EHcXwxx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1598c57bcc89aa415d0dacba17860d80_JaffaCakes118
Files
-
1598c57bcc89aa415d0dacba17860d80_JaffaCakes118.exe windows:5 windows x86 arch:x86
7eaeb8de82ab2c893d1195e30cc60321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateToken
Sections
.riv Size: 34KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jex Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dgv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lap Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE