Static task
static1
Behavioral task
behavioral1
Sample
96e06d28e6bfaf85671830edf6c093bb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96e06d28e6bfaf85671830edf6c093bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96e06d28e6bfaf85671830edf6c093bb_JaffaCakes118
-
Size
24KB
-
MD5
96e06d28e6bfaf85671830edf6c093bb
-
SHA1
118af6e819766f836d68cddd729f3119c4b286d0
-
SHA256
5d37de4d118af3f77783eba39cb62a78fed3a4010a72dca2a96081d2b252b846
-
SHA512
784f38b43abd7f72815db62c394fe6beddc438e7d135427a2144143556631c9dc540effa5c50706d263f3b9fd59d6f1f4a56b194f098d13945d3851bb5bdb260
-
SSDEEP
384:oXdhPPg123IM1ndrg1e4akgbFQ1Ud8QPUB+X8KOkPbqt2epp1mYNEN2:oDacdrie4Jg21Uj8QMD8bkpp1z22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96e06d28e6bfaf85671830edf6c093bb_JaffaCakes118
Files
-
96e06d28e6bfaf85671830edf6c093bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c41d0b5a9d05218c926ef138cc4ff12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA
msvcrt
_XcptFilter
exit
_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ