Static task
static1
Behavioral task
behavioral1
Sample
aea67c19f019b5e824b4b9167d3ed552_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aea67c19f019b5e824b4b9167d3ed552_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aea67c19f019b5e824b4b9167d3ed552_JaffaCakes118
-
Size
25KB
-
MD5
aea67c19f019b5e824b4b9167d3ed552
-
SHA1
27a440f5ce18acc6825c72cf67f2b8a93b33af1c
-
SHA256
0040fb965c2a8c651bb93bc078fe08493c4c2b3206f599c51d0031c5bac4130b
-
SHA512
833b10b6214ec7840929942193dc384a429e1999ee4d566826b8197e242093a075cb9e783a62f5857b7fd9cf2855afa1ca86480d381ccf467fba5087131e363f
-
SSDEEP
384:cOLM31kKXyeDVLRD3DhxDTZyUs+H6YQ3I2kdpdNMTF1+sAIip75S9IV/jAsxF6PH:yfdZt3D7Ds3+opkdc+Si55Si7BFo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aea67c19f019b5e824b4b9167d3ed552_JaffaCakes118
Files
-
aea67c19f019b5e824b4b9167d3ed552_JaffaCakes118.exe windows:4 windows x86 arch:x86
572ac795bdddd1d6e220dfb63be25904
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ExitThread
FindResourceA
LoadResource
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
user32
DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage
Sections
.text Size: 1024B - Virtual size: 582B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 390B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE