Static task
static1
Behavioral task
behavioral1
Sample
aa7b29d85097b6323005a92ee8d13507_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa7b29d85097b6323005a92ee8d13507_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa7b29d85097b6323005a92ee8d13507_JaffaCakes118
-
Size
356KB
-
MD5
aa7b29d85097b6323005a92ee8d13507
-
SHA1
91bedff6211a55c01bed9d68306840f521e39ce9
-
SHA256
8f9935601276214a3b4478a4f9bd244a8ae5244d6de6c2624dbbb7093a3d8478
-
SHA512
2e3870272289d445c61f26f2bb082e28af93c88e236f03a8d2a531a99bf3f4032b120eaa11526b13afcc6b04270e47d72307b1b09b46ea25339fdcfa11c24e51
-
SSDEEP
6144:jnSI4mxV8Thu5mj4+jcGdDUZ8d6ksS3M+/qzo8gFbmKos4DIuzeM:j3x+Q0jcG+mpsIizEbmKos4Drn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7b29d85097b6323005a92ee8d13507_JaffaCakes118
Files
-
aa7b29d85097b6323005a92ee8d13507_JaffaCakes118.exe windows:5 windows x86 arch:x86
91dda5149dd4554577801f3e7a641bd6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterHotKey
SetFocus
Sections
.text Size: 83KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE