Static task
static1
Behavioral task
behavioral1
Sample
435f87797cecb4763090e86993e0c87a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
435f87797cecb4763090e86993e0c87a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
435f87797cecb4763090e86993e0c87a_JaffaCakes118
-
Size
12KB
-
MD5
435f87797cecb4763090e86993e0c87a
-
SHA1
170567031e3a98e432a6ad4b6527645049e2812d
-
SHA256
76e4db36c66cbcb9a6e713e48ff24e147cd7888a4673d8beb551a2135a338443
-
SHA512
bf6ccd6a2e70de36dc8f6d2008e7e77446c72c0fa7d853f983619d4785af21a2f0ae37ddd89433bef7541fcecf3cc3d24c428f7257acff66f713f54fd9e97de1
-
SSDEEP
384:A2qlPWNcOMr0pVs7Nv9N6dnEtEYp9WKc0WE:AF2MrA+7zqnm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 435f87797cecb4763090e86993e0c87a_JaffaCakes118
Files
-
435f87797cecb4763090e86993e0c87a_JaffaCakes118.exe windows:6 windows x86 arch:x86
583907450a2ad182d215f76fa3b3af6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
ntdll
NtClose
rpcrt4
RpcStringFreeW
api-ms-win-core-errorhandling-l1-1-0
GetLastError
api-ms-win-core-heap-l1-1-0
HeapSetInformation
api-ms-win-core-interlocked-l1-1-0
InterlockedExchange
api-ms-win-core-libraryloader-l1-1-0
FreeLibrary
api-ms-win-core-localregistry-l1-1-0
RegCloseKey
api-ms-win-core-misc-l1-1-0
Sleep
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-synch-l1-1-0
InitializeSRWLock
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
api-ms-win-core-threadpool-l1-1-0
CloseThreadpoolWork
api-ms-win-service-core-l1-1-0
SetServiceStatus
Sections
.MPRESS1 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE