Static task
static1
Behavioral task
behavioral1
Sample
aeaba578396a80238fdadf65e6c2387e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
aeaba578396a80238fdadf65e6c2387e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
aeaba578396a80238fdadf65e6c2387e_JaffaCakes118
-
Size
1.8MB
-
MD5
aeaba578396a80238fdadf65e6c2387e
-
SHA1
fc6d527f683aa272e066fff31359ddeb6cb4e84d
-
SHA256
706b4e9adfe3e214131d55352485f58cbc70b1ba03ca73b8792cd2767dcf8a12
-
SHA512
005831870e1ed7ad7c96e3471e53c24e37704bc0e2a0edc52ff2f36a8a6058c95a67bafca9ad67bb9cffb1a5ec2b1c85c9c6c66e5a1506adf3bf725d826159f2
-
SSDEEP
49152:akiuwG5EwTrDgo2sGhoPSE8LOCARKN/uxYjg6:a08DsGhf3LZAMuaj5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeaba578396a80238fdadf65e6c2387e_JaffaCakes118
Files
-
aeaba578396a80238fdadf65e6c2387e_JaffaCakes118.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 63KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jdjqrogx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mpqcsjkt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE