Static task
static1
Behavioral task
behavioral1
Sample
93b53de1d4f791afde1b76fe8bb28f28_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
93b53de1d4f791afde1b76fe8bb28f28_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
93b53de1d4f791afde1b76fe8bb28f28_JaffaCakes118
-
Size
30KB
-
MD5
93b53de1d4f791afde1b76fe8bb28f28
-
SHA1
221491be32c00a01b87d611211dd5cc60bc4770c
-
SHA256
a27017766a983a7315398bd36ba46ddd0c3026605cef08df8ac36563ad6a0068
-
SHA512
be18cdbdba1d95c352a38e1ee196b8cfb3af97f07339e11b3af300cb331297200ccecc256e38d54fc5a76e4a2b0c8a88d8e6d4bec47a928623b1279cf9c3697f
-
SSDEEP
384:eKjpgD6kJW79a1eJlGuMNhAORc7SIYENlKI1NYayX3o3KRRcL7vvxlLIWcmHJWzP:eKjeGw1AGuMjAnSoNPjyXv+7Dt+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93b53de1d4f791afde1b76fe8bb28f28_JaffaCakes118
Files
-
93b53de1d4f791afde1b76fe8bb28f28_JaffaCakes118.exe windows:5 windows x86 arch:x86
a4c0e6f1d174f1bca3e93c5f4ed11b18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
IsIconic
advapi32
RegCloseKey
ole32
CoInitialize
shell32
ShellExecuteExW
msvcr90
exit
Sections
.MPRESS1 Size: 24KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE