Static task
static1
Behavioral task
behavioral1
Sample
ae075999ed1fdd9b5723a736989d86ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae075999ed1fdd9b5723a736989d86ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae075999ed1fdd9b5723a736989d86ab_JaffaCakes118
-
Size
63KB
-
MD5
ae075999ed1fdd9b5723a736989d86ab
-
SHA1
513cd5c8da7155efb22ccc21f93ff92ff2264934
-
SHA256
656f9215b9d4ef9bf6fb9d511e35787db046621dc83369777fe42417dbe0a9b9
-
SHA512
45def795c4e6c339383d519b2993c14bd8046253db21e0f41993fe3fc2e669c213383e6675d9dbe4e62f3c012f10903843b4fe0b1845723511c5fd7c2fccf0af
-
SSDEEP
768:cSuBdBjlo9p+2vhbXKK8sLT7/N6pqqG5harHCOcikHeW+u0W30ghlTgoBfCRG6FC:/9fRKpsX7/NZqZKeW+u0iDhpgs6a/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae075999ed1fdd9b5723a736989d86ab_JaffaCakes118
Files
-
ae075999ed1fdd9b5723a736989d86ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
158301ce3da141abdb1158eb88578a16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryDepthSList
NumaVirtualQueryNode
SetThreadAffinityMask
HeapAlloc
GetStringTypeExA
HeapWalk
EncodePointer
RegisterWowBaseHandlers
EnumTimeFormatsW
GetConsoleAliasesLengthA
WriteProfileStringA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE