Static task
static1
Behavioral task
behavioral1
Sample
aa66ff268f4cd1a5e901532e1516ded6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa66ff268f4cd1a5e901532e1516ded6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa66ff268f4cd1a5e901532e1516ded6_JaffaCakes118
-
Size
83KB
-
MD5
aa66ff268f4cd1a5e901532e1516ded6
-
SHA1
343c9171eae6ec4c354ebacfc1a6d3d9018210d2
-
SHA256
409ed819c3862f483294a27bd308dc657a1f3362aa1a4d943bbea0581dadd692
-
SHA512
716d7ffb6ee157ee766cb79ef414afaf6c25fc3ecf8794df897699bdaf4aff11b291fb5026ba2b2aa6acbe6dc3f01acbb1402d3471a193e02f604dcc7edb1d8e
-
SSDEEP
1536:Txxxx6PntfY+kTXLP8XiexO1nk0BPquGDtPjEErxTWDTMqhGKYIZTET8bDQ:Txxxx6Ptf7SL4gk0pZ0tPjBkMqhGKZTE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa66ff268f4cd1a5e901532e1516ded6_JaffaCakes118
Files
-
aa66ff268f4cd1a5e901532e1516ded6_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ad8d54974ec2d44122452ac89be11db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessWorkingSetSize
SetConsoleKeyShortcuts
GetExpandedNameA
LoadResource
CreateTapePartition
SetSystemTimeAdjustment
SetVolumeMountPointA
GetSystemDefaultLangID
MoveFileW
CreateProcessInternalWSecure
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE