Static task
static1
Behavioral task
behavioral1
Sample
aa3cf31f7a2e239fa00448e8ef1a13dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa3cf31f7a2e239fa00448e8ef1a13dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa3cf31f7a2e239fa00448e8ef1a13dd_JaffaCakes118
-
Size
68KB
-
MD5
aa3cf31f7a2e239fa00448e8ef1a13dd
-
SHA1
ac8f984d570941829ac950f7c621faac09563734
-
SHA256
df84dc3d5d1cab3b2db034a88facf9c8094f4b56c6bad94b33714377b03eae57
-
SHA512
06890105a675f36d460420f8df6cddbcf8556b85be650978a4b297f39ef4ba8f0dce7cc70f111f6190f78d5a16fde5afa2762703a54d794151f16f99c48ba175
-
SSDEEP
768:qvVK8nu6SL72GaAZ4kHQ/rWExt8dOg5ESjX9CsQcEo6UG1mzq:qvVKPzyGjjitIES8Bo6UGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa3cf31f7a2e239fa00448e8ef1a13dd_JaffaCakes118
Files
-
aa3cf31f7a2e239fa00448e8ef1a13dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee5f5eb37e1904bf95c0036169e06be9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetSystemDirectoryA
WinExec
CopyFileA
SetFileAttributesA
lstrlenA
CloseHandle
Process32Next
lstrcmpA
Process32First
CreateToolhelp32Snapshot
TerminateProcess
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
lstrcpyA
lstrcatA
CreateProcessA
IsBadWritePtr
IsBadReadPtr
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
CreateFileA
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FlushFileBuffers
HeapAlloc
HeapReAlloc
HeapSize
SetStdHandle
SetEndOfFile
SetUnhandledExceptionFilter
GetStringTypeW
user32
KillTimer
PostQuitMessage
SendMessageA
DefWindowProcA
MessageBoxA
CreateWindowExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyA
shlwapi
PathFileExistsA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE