Static task
static1
Behavioral task
behavioral1
Sample
ae2d0d25489e1b339ab6629192aff551_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae2d0d25489e1b339ab6629192aff551_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae2d0d25489e1b339ab6629192aff551_JaffaCakes118
-
Size
212KB
-
MD5
ae2d0d25489e1b339ab6629192aff551
-
SHA1
a56f3c05571fba538f9cdecc6348b384bd8b68df
-
SHA256
77c728d2382c0e8a3d3d53aa1e995a53dfd058346ae4a1aa63765eda51701b6e
-
SHA512
5afaf434e431c0f65f9d42664094de5e908ef153650e9e8efe27eddb71db68be2bf36c823a9385db4e9f18e53885668cc6b7891ea7cff5c66c88384d3e6bbd58
-
SSDEEP
3072:UPeaCUt7OLrLdeOvBeABunxiQSpn+326EVwF2YVpqlv+o5ith:haCuO5pRGxLinW26EVwF1qso
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae2d0d25489e1b339ab6629192aff551_JaffaCakes118
Files
-
ae2d0d25489e1b339ab6629192aff551_JaffaCakes118.exe windows:4 windows x86 arch:x86
98a760b034f116084785e8abcb3726db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetLastError
lstrcatA
ExitProcess
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcpyA
GetEnvironmentVariableA
LoadLibraryA
lstrlenA
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTickCount
GetTempPathA
Process32Next
SizeofResource
LockResource
LoadResource
FindResourceA
Sleep
GetWindowsDirectoryA
DeleteFileA
FreeLibrary
CreateThread
CloseHandle
ReleaseMutex
CreateMutexA
GetCommandLineA
LocalAlloc
InterlockedExchange
RaiseException
RtlUnwind
HeapReAlloc
MoveFileA
GetStartupInfoA
GetVersion
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ