Static task
static1
Behavioral task
behavioral1
Sample
aa56f0364aac47716bcc223432f400fa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa56f0364aac47716bcc223432f400fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa56f0364aac47716bcc223432f400fa_JaffaCakes118
-
Size
20KB
-
MD5
aa56f0364aac47716bcc223432f400fa
-
SHA1
a27308f15f57d88ff4a191d05c48aadb01f4aa0c
-
SHA256
ab5223a809cd5d3d50f4259ff2eb5174685f3f81e7a9ad5a82490bdc5e4496d4
-
SHA512
15dd2a059056e4c8a8952d05f7140acaab8a4f7c1a5b2c2dd104888a4f35145b45324a6f6ff112a5509de1a97aec428c44a4db6249e97204b6a708fdf95440c5
-
SSDEEP
192:+8Pm6WfyIB29+pKLbEXdsG43HBfInF8SpSDD86h0TT2QRKiQk3S:+8PSK8FpKHEXKGihf4F8hH8gA6QRKCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa56f0364aac47716bcc223432f400fa_JaffaCakes118
Files
-
aa56f0364aac47716bcc223432f400fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d54b0f778b16767b0bd4483743c6c9c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
GetCommandLineA
FindResourceA
ExitProcess
GetModuleHandleA
GetProcessHeap
HeapAlloc
user32
RegisterClassA
CreateWindowExA
GetDC
DefWindowProcA
gdi32
ChoosePixelFormat
SetPixelFormat
opengl32
glLightiv
wglMakeCurrent
wglGetProcAddress
wglCreateContext
glGetLightiv
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ