Static task
static1
Behavioral task
behavioral1
Sample
ac66690be24444826aa8c23b39183165_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac66690be24444826aa8c23b39183165_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac66690be24444826aa8c23b39183165_JaffaCakes118
-
Size
25KB
-
MD5
ac66690be24444826aa8c23b39183165
-
SHA1
c94acbead214951bfe6d7a4de0e4ae506a60a86d
-
SHA256
2622889fbaae753c48d1e1a624e5aef9299064f8f6f8cd907dc96fa2e10566b0
-
SHA512
b04df0ef63879529c676407ac7724f75ac67e6d24fc55e6c0e7146a63e4f31c9ed8eb7093a8eb42ab711e68cd262213ec0e352aa77527758765e07425b2dce25
-
SSDEEP
384:FGRy7+2+ngW6p7HwEg5nb+CIDKCjuj1e74aRdTQRS53zE:Uy7YnkL8+N3juxo4OdERuzE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac66690be24444826aa8c23b39183165_JaffaCakes118
Files
-
ac66690be24444826aa8c23b39183165_JaffaCakes118.exe windows:3 windows x86 arch:x86
5ede171bba922ae7f9572eaf94102010
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualProtect
user32
GetKeyState
SetActiveWindow
GetFocus
gdi32
EndDoc
LPtoDP
SetMapMode
Sections
.idata Size: 512B - Virtual size: 346B
IMAGE_SCN_MEM_READ
.code Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ