Static task
static1
Behavioral task
behavioral1
Sample
96be042d23fe58a8ca7cde70229ac56c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
96be042d23fe58a8ca7cde70229ac56c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96be042d23fe58a8ca7cde70229ac56c_JaffaCakes118
-
Size
25KB
-
MD5
96be042d23fe58a8ca7cde70229ac56c
-
SHA1
2a21d7c6efaa45f6d873bd567896d72adcd08844
-
SHA256
c1bed578a7a308c23b3125ae743a29e12cf02a2ea149643795048d49edb1248d
-
SHA512
84dc4d4e980632317b0e937cdab1ffe143aba228b53589cac620fde26e542aee80abea21bd49ca4a866d7a8e21c803fefa7769334c5db1ff65cea99acd847e17
-
SSDEEP
384:2/pjpaYEftHa9pb0sU+HpRsN9rTozt/ZlREx5NW/GSz9jCUbju9MiHQBBAduHelZ:qpjpaYOHwtpR7/2c9jvgM1BAdzttV7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96be042d23fe58a8ca7cde70229ac56c_JaffaCakes118
Files
-
96be042d23fe58a8ca7cde70229ac56c_JaffaCakes118.exe windows:4 windows x86 arch:x86
cd78a217e01721e6f8a79d610f8c58de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
AddAce
Sections
.MPRESS1 Size: 21KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE