Static task
static1
Behavioral task
behavioral1
Sample
aeebb31b41f5780ffe3da173f13d631b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aeebb31b41f5780ffe3da173f13d631b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeebb31b41f5780ffe3da173f13d631b_JaffaCakes118
-
Size
377KB
-
MD5
aeebb31b41f5780ffe3da173f13d631b
-
SHA1
7f644c492a3aea86e39e99775c246371c711bbf6
-
SHA256
8c477476a850d44a2a6d4cb29164fa5517ce5df9b99b916049a4a9ca11a098ef
-
SHA512
e35e2c54eb43166c2a67b47dc068997613d136acc9a753e8b0da1275270183152aaa343890af82432580db5129c933dbba888d6b769c85b2bde3f87227b34928
-
SSDEEP
6144:rQNNea0HPs881CE+2JlaIjuKDPS1OddHaEXXW77jSlOJN1HWXMFozjFCSr3xq+ez:gGHs1CE+2acue646iG77jSlO8voSrcAI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeebb31b41f5780ffe3da173f13d631b_JaffaCakes118
Files
-
aeebb31b41f5780ffe3da173f13d631b_JaffaCakes118.exe windows:5 windows x86 arch:x86
007f7209ce5b21b4494bce189afaa5e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleW
OutputDebugStringW
GetThreadSelectorEntry
GetTickCount
QueryPerformanceFrequency
RaiseException
user32
DdeDisconnect
odbc32
SQLFreeHandle
advapi32
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 439KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ