Static task
static1
Behavioral task
behavioral1
Sample
93d8bf93e0d777c61d9ad5b9ce35bd5b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
93d8bf93e0d777c61d9ad5b9ce35bd5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93d8bf93e0d777c61d9ad5b9ce35bd5b_JaffaCakes118
-
Size
25KB
-
MD5
93d8bf93e0d777c61d9ad5b9ce35bd5b
-
SHA1
028fa6ded05fc43f863fb703639cbc07f081f9cf
-
SHA256
cbd4f1c561f4470b6cb9f8c3e2a14fa64fd64ddd5728068e1da914e1feb881f5
-
SHA512
2941c96421f49b4599d7983127cb77624a3112bd140b0cce3b126fb901830e27d34b5ad7c40bf0669335c6ecbd4df4014f7d56884f3a3c059c9b481709e2c3d9
-
SSDEEP
384:xtmlb4BHB9aejai6kgiag4h8DEVtK1Tqm7ETXD/5Khuus:xYlAaejaiD2dtK1TqmQTXz5KhXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93d8bf93e0d777c61d9ad5b9ce35bd5b_JaffaCakes118
Files
-
93d8bf93e0d777c61d9ad5b9ce35bd5b_JaffaCakes118.exe windows:5 windows x86 arch:x86
cca09f7b4e13aa33cf0a6ad19bd51cfc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateFileA
lstrcatA
GetProcAddress
LoadLibraryA
CloseHandle
VirtualAlloc
lstrcpyA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2 Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3 Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4 Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ