Static task
static1
Behavioral task
behavioral1
Sample
96735e552b17f7ca99b4f7f38b44ba80_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
96735e552b17f7ca99b4f7f38b44ba80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96735e552b17f7ca99b4f7f38b44ba80_JaffaCakes118
-
Size
61KB
-
MD5
96735e552b17f7ca99b4f7f38b44ba80
-
SHA1
8287510799fe815c12fde2bf0d59493784049b15
-
SHA256
0b662c3c01530170dc1fedfb29a4bcf9523b1f2904edb00cb28b7c186ae668c9
-
SHA512
e63e1d001ab5bbb13ebccc32b8962fa461b8d446f1cd649cfacd1e05f91f35435973d6f663fc53ae1538802b121354a4a468a587f7a21c7daa75766c323e1baa
-
SSDEEP
1536:nDF26iSumX5ukVfBQW5cdQCgiPGj5N+Oef:86iSumXMkzQkco75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96735e552b17f7ca99b4f7f38b44ba80_JaffaCakes118
Files
-
96735e552b17f7ca99b4f7f38b44ba80_JaffaCakes118.exe windows:5 windows x86 arch:x86
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ