Static task
static1
Behavioral task
behavioral1
Sample
aaf01c1a97f4b1700c81843e83ed048e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aaf01c1a97f4b1700c81843e83ed048e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aaf01c1a97f4b1700c81843e83ed048e_JaffaCakes118
-
Size
81KB
-
MD5
aaf01c1a97f4b1700c81843e83ed048e
-
SHA1
2ed702f90289d8d172d7d99919d5650215a75a46
-
SHA256
633794c0ad794ebae1bfe1ecb76f20eca1218aca1f35e747b5885cf59d43a8c0
-
SHA512
7a5bc28ded5b6c93c03449f8b10112f4ef5329cbbdae5958a863b4dcc9cc8eaa4b54dc0173d88c85de2b919b5fd6feddbc933820ff476b34204ff2a87b01feec
-
SSDEEP
1536:2byQ5WwB5U8JgGMabHwZVfQ5MhEg1i6MK64tDHnvmw1V6K14WIs:i55p5U8JgGRbQ0eDiRPMHnv94Vs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaf01c1a97f4b1700c81843e83ed048e_JaffaCakes118
Files
-
aaf01c1a97f4b1700c81843e83ed048e_JaffaCakes118.exe windows:5 windows x86 arch:x86
80b2c6f7510f1040ee1e8db3f35bf613
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
?imag@?$_Complex_base@O@std@@QAEOABO@Z
?_Init@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEXPBGIH@Z
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
??Kstd@@YA?AV?$complex@N@0@ABNABV10@@Z
??Ystd@@YAAAV?$complex@M@0@AAV10@ABV10@@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??1bad_cast@std@@UAE@XZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
?_Init@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
?toupper@?$ctype@G@std@@QBEGG@Z
kernel32
CopyFileW
GetNumaAvailableMemoryNode
GetTickCount
GetModuleHandleExA
SetTapeParameters
GetModuleHandleW
LoadLibraryA
GetCurrentProcessId
TlsSetValue
BuildCommDCBW
SetFileAttributesW
GetVolumePathNameW
EnumSystemLanguageGroupsW
Module32FirstW
GetCurrentThreadId
lstrcmpiW
FindAtomA
GetStartupInfoA
SetComPlusPackageInstallStatus
FindResourceW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetLogicalDriveStringsW
VirtualAlloc
ntdll
RtlUnhandledExceptionFilter
RtlExtendedLargeIntegerDivide
swprintf
ZwSaveKeyEx
wcscmp
RtlPopFrame
RtlUnicodeStringToAnsiString
RtlExitUserThread
RtlInitializeRXact
ZwAddBootEntry
RtlQueryInformationActiveActivationContext
_memccpy
dnsapi
DnsValidateName_UTF8
DnsRecordSetCopyEx
DnsRecordStringForType
DnsCreateStringCopy
Dns_PingAdapterServers
DnsApiSetDebugGlobals
Dns_ReadPacketNameAllocate
Dns_SetRecordDatalength
DnsQueryConfigDword
Dns_BuildPacket
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ