Static task
static1
Behavioral task
behavioral1
Sample
aeeaa68f780df7bcba37087c0f9a6ec6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aeeaa68f780df7bcba37087c0f9a6ec6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeeaa68f780df7bcba37087c0f9a6ec6_JaffaCakes118
-
Size
28KB
-
MD5
aeeaa68f780df7bcba37087c0f9a6ec6
-
SHA1
16be98cc04b27a228d9a7c620c2cc8b4c3113ff5
-
SHA256
bbbbb22c978a22d7bd468fa4fa40d088c1d888cdf33a8df5b3ca6ebccfabddf0
-
SHA512
9981c20680299556fd3d7ad9b718c43bc9fcaea5ebf0cda23fa130964059bd98c84f9a1fe49123141769093f285d898f7317b6f6fc00c6fb0e4ba4bab0ebc51b
-
SSDEEP
384:QUXDPZCQ7sYoACIEfj1Tq4xUKNqXLdGYAzsymzyTf5+LqBr:QUbZCQ3Ctj1OzKILIzTu0ULU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeeaa68f780df7bcba37087c0f9a6ec6_JaffaCakes118
Files
-
aeeaa68f780df7bcba37087c0f9a6ec6_JaffaCakes118.exe windows:4 windows x86 arch:x86
97b7258dcdde26aaebcd364c176c630d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetModuleFileNameA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CopyFileA
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
VirtualAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetProcAddress
LoadLibraryA
SetFilePointer
SetEndOfFile
ReadFile
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE