Static task
static1
Behavioral task
behavioral1
Sample
96a0ce6a7b757390e5ccebd3e515886f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96a0ce6a7b757390e5ccebd3e515886f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96a0ce6a7b757390e5ccebd3e515886f_JaffaCakes118
-
Size
1.1MB
-
MD5
96a0ce6a7b757390e5ccebd3e515886f
-
SHA1
9d62f48160af676c0573f605a1644b898c567fa1
-
SHA256
81e05d2385a0b25bd1b51bfcd1e35ac90818b53b70183b1b5144ab74de5fdcf5
-
SHA512
73dbbd563c9eae0fb5b6044944b03a8050cdaa912aa8eed87f358466a106aab67432997677fe75ad704803703fedb6618c1313963949b1a8ff61a0091e6e0d94
-
SSDEEP
24576:C6kz6YC/rOj4Ph0V7gb/3ZXegK1xWncapjJb3nkKwaHSR+5z:x9J6j4Ph0xA3jnnca9JrnfX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a0ce6a7b757390e5ccebd3e515886f_JaffaCakes118
Files
-
96a0ce6a7b757390e5ccebd3e515886f_JaffaCakes118.exe windows:8 windows x86 arch:x86
6a949841a9dba5585aa5f97b198ce7f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetNamedPipeInfo
LoadLibraryA
HeapAlloc
UnmapViewOfFile
MapViewOfFile
ReadFileEx
CreateMutexA
HeapFree
HeapUnlock
HeapDestroy
HeapCreate
ConnectNamedPipe
CreateFileMappingA
CreateNamedPipeA
WriteFile
lstrcpynA
TransactNamedPipe
DeleteCriticalSection
EnterCriticalSection
ExitProcess
HeapValidate
CreateFileA
GetHandleInformation
SetFilePointer
HeapLock
HeapQueryInformation
HeapSetInformation
ReadFile
InitializeCriticalSection
OpenFileMappingA
GetCurrentDirectoryA
lstrcatA
SetFilePointerEx
Sections
.text Size: 983KB - Virtual size: 983KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrcs Size: 15KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ