Static task
static1
Behavioral task
behavioral1
Sample
569e5d31db984dcb477ba734046156a7_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
569e5d31db984dcb477ba734046156a7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
569e5d31db984dcb477ba734046156a7_JaffaCakes118
-
Size
399KB
-
MD5
569e5d31db984dcb477ba734046156a7
-
SHA1
669503a2cca0ce9f016c80353479bf145bf67583
-
SHA256
b3aa0614ce11b3f6dfcc6d2c2b5a910a232f5316bc0ecd5f0c097fcc1d994b1a
-
SHA512
87d11d2a9a8fdb1491910d226dce799add0f5eea96b577401d87dbb6ceb6f2a0d3043845520552818185d2a4451cfe4e700b12ead1441b045b4359cbb05d7478
-
SSDEEP
6144:HQCN1jPGxe4adxc8Ze4Jq0dzhQLrh9x+nxEbbxPuNtqfKh/HEpr:HQCN1jPGDadw41+LV9C25WNYC5Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 569e5d31db984dcb477ba734046156a7_JaffaCakes118
Files
-
569e5d31db984dcb477ba734046156a7_JaffaCakes118.exe windows:5 windows x86 arch:x86
dbc5c6e96eb25f930ad5a8c3d82bdd0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetStartupInfoW
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
advapi32
RegOpenKeyA
RegCloseKey
Sections
.text Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ