Static task
static1
Behavioral task
behavioral1
Sample
aca5c27ad2231e26e00c9e119827a6a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aca5c27ad2231e26e00c9e119827a6a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aca5c27ad2231e26e00c9e119827a6a5_JaffaCakes118
-
Size
3.3MB
-
MD5
aca5c27ad2231e26e00c9e119827a6a5
-
SHA1
0a5ac7d76cfcc70edce179527fde9e03bd15e603
-
SHA256
d66ff86c8c955f7d69e25a35c8eb26ef9055cb6a28b335524e4fa575ea52848f
-
SHA512
6f9bb8b846007eee11854d95185c2255232652fbc6a264904bfa564bc0ea2ededc356e99eb33d524e40d923ea84d6c7e381ab3dbbfffb97f0b78a2bd9236ffa9
-
SSDEEP
98304:P+Pn2pjz2sxjHRbjrTIHcjA4pGkFd+o1UL+fiTG:P+P2pj5dH9HTIHGA4hl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aca5c27ad2231e26e00c9e119827a6a5_JaffaCakes118
Files
-
aca5c27ad2231e26e00c9e119827a6a5_JaffaCakes118.exe windows:5 windows x86 arch:x86
e17ec8069b51f28ec2688c86a7630b04
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayCreate
advapi32
RegDeleteKeyW
user32
MessageBoxW
kernel32
TlsFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msimg32
AlphaBlend
gdi32
CreateBrushIndirect
version
GetFileVersionInfoSizeW
ole32
OleSetMenuDescriptor
comctl32
ImageList_EndDrag
urlmon
CoInternetCreateSecurityManager
wininet
InternetSetOptionW
shell32
ShellExecuteW
comdlg32
GetOpenFileNameW
winspool.drv
EnumPrintersW
crypt32
CertCloseStore
wsock32
WSAGetLastError
shdocvw
DoOrganizeFavDlg
Sections
.text Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 22KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: - Virtual size: 934B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 60B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ