Static task
static1
Behavioral task
behavioral1
Sample
575d1aea59db8b0c91d12c51d5aa53d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
575d1aea59db8b0c91d12c51d5aa53d0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
575d1aea59db8b0c91d12c51d5aa53d0_JaffaCakes118
-
Size
373KB
-
MD5
575d1aea59db8b0c91d12c51d5aa53d0
-
SHA1
53f32ffdf59ee1e56ca19d595e328558edc76838
-
SHA256
b61a376049a6514a6c1b78e284f0aeb7f2574259525b2000660484cab6bdb356
-
SHA512
816e2ea0f8154c77be6189f8274b848d4706cde9eefe5372190b3f0b42343ad1bfd65f91e4a0ca455d018790a134c278ed3b553dbe5c28ed3060cd1006a525b8
-
SSDEEP
6144:tKaq0I0wqesaSfKHjT2H0jlVLmpvHWcVudhalrHLJHU1nX+/RzSiaVlWpCeNIzmQ:zqOgsaDT2UjlVLmpvHWLor9WukicgIyQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 575d1aea59db8b0c91d12c51d5aa53d0_JaffaCakes118
Files
-
575d1aea59db8b0c91d12c51d5aa53d0_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ