Static task
static1
Behavioral task
behavioral1
Sample
ac0ec34d1fe6217be7b6b3f6f10f0d16_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac0ec34d1fe6217be7b6b3f6f10f0d16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac0ec34d1fe6217be7b6b3f6f10f0d16_JaffaCakes118
-
Size
1.0MB
-
MD5
ac0ec34d1fe6217be7b6b3f6f10f0d16
-
SHA1
88da7f515e4285367270e487cf120298c518f0d6
-
SHA256
7a7bd3a8ef4afbad877da2dbfc5fa236c7602d57bd18e023f58f3c9df16a6c5a
-
SHA512
6bfef53c425bae08fef0ea2d921f98870a8184d0441466121c69f366b739f08d7b9c1dbd6166d558e1c9956067c5f3bdec42add98bb4f6eb412ad44967b76773
-
SSDEEP
24576:ueKIEzL1v7KWZUA/cuJ7v2FE/GQ5DrS9ft+GHEqIkZooAK2xLgn:upZ7KWZBLv2iGT+GHEtkypK2xLgn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac0ec34d1fe6217be7b6b3f6f10f0d16_JaffaCakes118
Files
-
ac0ec34d1fe6217be7b6b3f6f10f0d16_JaffaCakes118.exe windows:5 windows x86 arch:x86
8b7601a390a0d5ef4de95a4326be4a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
msvcrt
malloc
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
IsWindow
advapi32
RegOpenKeyExA
Sections
.data Size: 132KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 880KB - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ