Static task
static1
Behavioral task
behavioral1
Sample
93fe0e86aa9877dfb4a6fc30418c8694_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
93fe0e86aa9877dfb4a6fc30418c8694_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93fe0e86aa9877dfb4a6fc30418c8694_JaffaCakes118
-
Size
49KB
-
MD5
93fe0e86aa9877dfb4a6fc30418c8694
-
SHA1
611e82a67b10ab7b4322bc217317e228c0c53947
-
SHA256
3eebdd58b5a0b359113cbc51557d774097c6ddbb0ca84d3edf23c05dae4f8538
-
SHA512
d322b24aea4d57ec7085cd756e806d3a66a74d7a7be2b0974265ab0d055322383b3f64fdbb1d2734e2e0254e87153e044ad149d657434add1f508c0efb886c35
-
SSDEEP
1536:zcyy0D6tyLdIbnz1COYolLpUMbPFC8GqGL:InQdIbV3U0PFNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93fe0e86aa9877dfb4a6fc30418c8694_JaffaCakes118
Files
-
93fe0e86aa9877dfb4a6fc30418c8694_JaffaCakes118.exe windows:5 windows x86 arch:x86
147d80b1305adc7ec92a1e2a577a1868
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
gdi32
Arc
comdlg32
PrintDlgA
advapi32
RegCloseKey
ole32
CoInitialize
comsvcs
CoCreateActivity
crypt32
PFXIsPFXBlob
imm32
ImmIsIME
iphlpapi
SetIpTTL
msi
ord130
msvfw32
ICLocate
mswsock
WSARecvEx
ws2_32
WSAStartup
Sections
.MPRESS1 Size: 47KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE