Static task
static1
Behavioral task
behavioral1
Sample
ae19b7b3c13318cbeffc13d4006d3ea4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae19b7b3c13318cbeffc13d4006d3ea4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae19b7b3c13318cbeffc13d4006d3ea4_JaffaCakes118
-
Size
67KB
-
MD5
ae19b7b3c13318cbeffc13d4006d3ea4
-
SHA1
1ee8ec5844f3df271ddc4065c2eba698731cceb1
-
SHA256
51e5bbaed6a7eedbe4e52c09c9fa5860c96b6c2b80e1f25fd3d1f565a57692dc
-
SHA512
bc6e040a7fd4a1a50206206545c1c6df0451011139d428d194cc25e9c6665c798a33c614e053548fe3642b6de8e076041e05e00e37e39ad4533e4cb67ebd58dc
-
SSDEEP
768:6E18Pr1pBZWTz/a2e7jrJdbXkZKLKOaLlrik9X+q0+Xjnwwd/v2GBu:69Uz/tsjrPbUtlGonvX9nY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae19b7b3c13318cbeffc13d4006d3ea4_JaffaCakes118
Files
-
ae19b7b3c13318cbeffc13d4006d3ea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a44ae5b743500534ee228bab8295235
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryExA
lstrcmpiA
DeleteFileA
SetFileAttributesA
lstrcatA
GetStartupInfoA
ExitProcess
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
WriteFile
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetLastError
SetLastError
lstrcpyA
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetDriveTypeA
lstrcpynA
ReadFile
GetFileSize
GetVersionExA
CloseHandle
GetUserDefaultLangID
lstrlenA
CreateDirectoryA
EnumResourceNamesA
SetCurrentDirectoryA
DebugBreak
RemoveDirectoryA
user32
CharNextA
wsprintfA
MessageBoxA
advapi32
RegFlushKey
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 478B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ