Static task
static1
Behavioral task
behavioral1
Sample
aebe0cab83bb8e6f988a040b8c09d4d7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aebe0cab83bb8e6f988a040b8c09d4d7_JaffaCakes118
-
Size
2.6MB
-
MD5
aebe0cab83bb8e6f988a040b8c09d4d7
-
SHA1
56dde9b3a2bf48737378f52f08a6a78c1bd1b830
-
SHA256
55a0ae4fd4d354adde7e0c222d1973c358486328057b48e774730a6676498846
-
SHA512
b7bc4b0e7f5dbcb4f9690561b2c0750bcbc4d30cb61dfbee1b5818fb5dab4b440069e1db2323e42099257995d359974a9b2d7e3c8fe43c70d68f1594634e18a6
-
SSDEEP
49152:wCoBSFaZ8T+vvEy/mhDYJTUC/XPimOgtNgdRvouzV5TAjKz6b/NjYmxJohu8KT1j:wCaSFjqHEyOhITUCitCydRvourAjK+bl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aebe0cab83bb8e6f988a040b8c09d4d7_JaffaCakes118
Files
-
aebe0cab83bb8e6f988a040b8c09d4d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
732d15231498997002b8c4b9ee992b93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleHandleA
Sections
.text Size: 47KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE