Static task
static1
Behavioral task
behavioral1
Sample
aeca4f5ad61e6f1d4895c99563ec8575_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aeca4f5ad61e6f1d4895c99563ec8575_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeca4f5ad61e6f1d4895c99563ec8575_JaffaCakes118
-
Size
83KB
-
MD5
aeca4f5ad61e6f1d4895c99563ec8575
-
SHA1
f9a921243d9b7a847ede5fc4dc3c130be8980f13
-
SHA256
5569774bb60dfbe52f1bb3c5718e8c1ce6f1da684b60a4de430b6a36a5aa276c
-
SHA512
b61c472a469a293c348cf278a93f3ecdbcb2ccf4dd439af8f5044e61a8d6c3489822f8681c6804fe017d546b377d39603906a0baa2e013d08e562d5acdc10681
-
SSDEEP
1536:3gYmkOc7YgxEElcDzanS0ye0PRq37uRyzUOQKSRprpjVrs2ryrd1vUQuqPj:35xEElcfanzPLuQhzCHs2q1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeca4f5ad61e6f1d4895c99563ec8575_JaffaCakes118
Files
-
aeca4f5ad61e6f1d4895c99563ec8575_JaffaCakes118.exe windows:4 windows x86 arch:x86
37534d0653e8366148f790ebd3561ed2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntA
FindActCtxSectionGuid
GetConsoleInputExeNameW
SetConsoleMode
SetPriorityClass
GetStdHandle
SetComputerNameW
WriteConsoleOutputCharacterA
GetProcessId
GetVersionExW
GetCurrencyFormatA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE