Static task
static1
Behavioral task
behavioral1
Sample
aa9bde03abcaf51d3697eb3f04f96edc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aa9bde03abcaf51d3697eb3f04f96edc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
aa9bde03abcaf51d3697eb3f04f96edc_JaffaCakes118
-
Size
4KB
-
MD5
aa9bde03abcaf51d3697eb3f04f96edc
-
SHA1
5a45ca9d44980dd32b7cd7dd08c4f6faa33caeee
-
SHA256
3dc8711636ccffa1911ab2c5d7d23a7b45f3535be2a5bd5615f2a74faa2fd9f4
-
SHA512
59f3385fe82351d5aebc80f495cb39728046fb07db16385818b0afe92fd546b7d93590deda5649eb52db8617d123059d54a480f0acf713ac3fbaa29314571717
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa9bde03abcaf51d3697eb3f04f96edc_JaffaCakes118
Files
-
aa9bde03abcaf51d3697eb3f04f96edc_JaffaCakes118.exe windows:1 windows x86 arch:x86
75d3325fa252a362309171b30f8fac49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
VirtualAlloc
lstrcatA
lstrlenA
Sections
.flat Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
carmapi Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE