Static task
static1
Behavioral task
behavioral1
Sample
ae7b4826ad30a45846f4ab971835d3ba_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ae7b4826ad30a45846f4ab971835d3ba_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
ae7b4826ad30a45846f4ab971835d3ba_JaffaCakes118
-
Size
299KB
-
MD5
ae7b4826ad30a45846f4ab971835d3ba
-
SHA1
80a185f61d185aa0209706183e93e754b93f34dd
-
SHA256
cf3446b0463533adcefc0e8e915dba9fc9df2539b37f9e63a3b5614132482026
-
SHA512
7a9f5c4891e86a40267eaeec458f4aa2d37ccaa056c028b1f1ba0068142e4855754cc9272e77fd71f2b2cdf5f0c4d01a16f9a3bda361ce2ebc1fec81b3e1a138
-
SSDEEP
6144:z/VG78K2QvdYtMrwmPAa+b4GFaSr3knkAzfSmC6B6kqNY2wqbeCaV0Fuepv:z/M2UYtM7o/DFaG30llC6B6kq3wqKCuC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae7b4826ad30a45846f4ab971835d3ba_JaffaCakes118
Files
-
ae7b4826ad30a45846f4ab971835d3ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
42cb197f2cb9502b0d0dc116807b26d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetTimer
advapi32
LookupAccountNameA
ole32
CLSIDFromProgID
ws2_32
getpeername
shlwapi
PathFileExistsA
dnsapi
DnsQuery_A
shell32
SHGetSpecialFolderPathA
msvcrt
_strnicmp
oleaut32
RegisterTypeLi
Sections
.text Size: 270KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE