Static task
static1
Behavioral task
behavioral1
Sample
aaf2609ca04510afa0977c8d0fb415eb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aaf2609ca04510afa0977c8d0fb415eb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
aaf2609ca04510afa0977c8d0fb415eb_JaffaCakes118
-
Size
75KB
-
MD5
aaf2609ca04510afa0977c8d0fb415eb
-
SHA1
181d6d094fc17e66ac83d7295922492c14902038
-
SHA256
23dd9f56a4fbab268505820d243955a0ac10fae7da9f17d6fe17649ad0d92b92
-
SHA512
a1bf10bd1549f8443eb27eb2a7acff2119ea9a9b85f25ebf4fa81a3e84194fd70292c15a863477501dd4fdd41091a28ff4d7b07aa90df8565d21b40470c7c7b1
-
SSDEEP
1536:/Yf5kQNIBOKWKRjqPKTE7+d+UFQc/JF41HWBSUDNX86hHNU0UMGqiBiOqsR90uoG:/YxktsYRmKTe+dmc0NWBSaNX8sUsbNPK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaf2609ca04510afa0977c8d0fb415eb_JaffaCakes118
Files
-
aaf2609ca04510afa0977c8d0fb415eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
52e6fbb559c4caf57a774b3f8f049be1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
shell32
ord165
ole32
CoGetObject
shlwapi
StrRStrIW
imm32
ImmDisableIME
Sections
.MPRESS1 Size: 69KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE