Static task
static1
Behavioral task
behavioral1
Sample
aaf873d1c6e764cf2365ce819b338ebb_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aaf873d1c6e764cf2365ce819b338ebb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aaf873d1c6e764cf2365ce819b338ebb_JaffaCakes118
-
Size
76KB
-
MD5
aaf873d1c6e764cf2365ce819b338ebb
-
SHA1
0252b35651164c8dd3d5b2569eac5c4b1241936f
-
SHA256
02e9665d67d3092b140704a697dae499c8296ea7943f3dfaa740080469cf7eba
-
SHA512
820f854842f8ffaabcf678c3af7a189303eac6528df8e5a3837632821ba4694289820d73dd24e880b812488ef32ccda89840ce03daf0ffd563e1457166b8a941
-
SSDEEP
1536:U1RuGU0A7OLdnh/ai9nYf0mqpXVzmaSUNvdKvTjdGFOP/SFnG7MAXbnSP:U1cAlh3nm0mqpXFmadVdiTjdYo/S07MF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaf873d1c6e764cf2365ce819b338ebb_JaffaCakes118
Files
-
aaf873d1c6e764cf2365ce819b338ebb_JaffaCakes118.exe windows:5 windows x86 arch:x86
9e931ccbcc0e75011f69320539267c13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
lstrlenA
lstrcatA
GetTempFileNameA
GetLocalTime
GetModuleHandleA
VirtualProtect
FindResourceA
LoadResource
LockResource
OpenMutexA
WriteFile
ReadFile
SetFilePointer
CreateProcessA
GetModuleFileNameA
MoveFileA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
GetTickCount
CreateFileA
SizeofResource
ExitProcess
IsDebuggerPresent
user32
wsprintfA
CreateWindowExA
RegisterClassA
PostQuitMessage
SendMessageA
advapi32
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegSetValueExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ