Static task
static1
Behavioral task
behavioral1
Sample
413766b5b486453fd8025d5901ebf2fc_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
413766b5b486453fd8025d5901ebf2fc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
413766b5b486453fd8025d5901ebf2fc_JaffaCakes118
-
Size
269KB
-
MD5
413766b5b486453fd8025d5901ebf2fc
-
SHA1
2b92abe05db92b165672caef0158d20ecf3ca2e7
-
SHA256
de00f3d63b3143000ea67f9be5f921cd4095acc55d3094e3adc5d9c59933eaa8
-
SHA512
7465877a2f40fc5659bd053ba996a86226097e5ceedfd9e7583096e77e4c9ec4cac8dfbc244214b11559d2fbb61777aa516ca911784fb5dfe669b5057c281fc2
-
SSDEEP
6144:Hxin0Sasd/f08vbvRBJ7DguS2SQiLApmgcfDQFvQ6SC:RbSaIbvRBJ7DgP2SQiHpfcFo6SC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413766b5b486453fd8025d5901ebf2fc_JaffaCakes118
Files
-
413766b5b486453fd8025d5901ebf2fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
0dc546530264963500825fa2854518e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetLastError
user32
DestroyWindow
GetSystemMetrics
advapi32
RegDeleteKeyA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE