Static task
static1
Behavioral task
behavioral1
Sample
16d51ef4c8681a9db7fe8b4495e27795_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
16d51ef4c8681a9db7fe8b4495e27795_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
16d51ef4c8681a9db7fe8b4495e27795_JaffaCakes118
-
Size
52KB
-
MD5
16d51ef4c8681a9db7fe8b4495e27795
-
SHA1
bde3c5e6db25bf728d3f81ec179c05c510e8fa42
-
SHA256
811368599eaef5610f57200d92b426587873b84d61e92a7f254785d6dbec9f0d
-
SHA512
2e906ec783d2cda20e0aa340d891ba9ddddf8e1c848906f348f3e17a917ed06881aa057f36dd5aec6b5ec6347fa765e301fb2d7412be1e913d44b94203facf82
-
SSDEEP
768:DUqZQQANdinHOok5NoH9FTOllNyJQ7gpBdVr/rsMrvGOTbxs7DozmOoN2:DUqZQpGnHOoYoHKNxgFhTFDSOoY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16d51ef4c8681a9db7fe8b4495e27795_JaffaCakes118
Files
-
16d51ef4c8681a9db7fe8b4495e27795_JaffaCakes118.exe windows:5 windows x86 arch:x86
e76593d40f2e3ce990b3d4f8421ffd8b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
msvcp60
??0_Lockit@std@@QAE@XZ
advapi32
CopySid
user32
CharNextW
netapi32
NetUserAdd
rpcrt4
UuidCreate
oleaut32
RegisterTypeLi
ole32
CoInitialize
regapi
RegGetMachinePolicy
winsta
WinStationSetInformationW
wtsapi32
WTSFreeMemory
wsock32
gethostbyname
Sections
.MPRESS1 Size: 31KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE