Static task
static1
Behavioral task
behavioral1
Sample
96a3e1100367fb562b599f78169eb191_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
96a3e1100367fb562b599f78169eb191_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
96a3e1100367fb562b599f78169eb191_JaffaCakes118
-
Size
43KB
-
MD5
96a3e1100367fb562b599f78169eb191
-
SHA1
9f24e0afcd3738f2ceced7ab96e5ec5731dad821
-
SHA256
9d9ee1247b358258e1fb1df3471193fc32cb7c47b877ebf6287d25559a9e88f9
-
SHA512
cebaf7423a756c1119c148ba0d9816df32f4510f7dfd51b5f65c3e7d6a8fb2c9e223f23c3b5760014ce3d45b27f617fd9e4c484957e0f3d7c5f18f4dd673c0da
-
SSDEEP
768:pW0P9W7aF76sPt3T9fkNZrtAP6F87usl555+7DjW5A:pW0P90aF7VjmrtBu6s/5MW5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a3e1100367fb562b599f78169eb191_JaffaCakes118
Files
-
96a3e1100367fb562b599f78169eb191_JaffaCakes118.exe windows:5 windows x86 arch:x86
4beb9391fcc195037f2b04e93a191d5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
wtsapi32
WTSFreeMemory
setupapi
SetupDiGetClassDevsA
shlwapi
StrRChrA
Sections
.MPRESS1 Size: 38KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE