Static task
static1
Behavioral task
behavioral1
Sample
aeee3c6f67b2403e4f1ec03d7016434a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aeee3c6f67b2403e4f1ec03d7016434a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeee3c6f67b2403e4f1ec03d7016434a_JaffaCakes118
-
Size
74KB
-
MD5
aeee3c6f67b2403e4f1ec03d7016434a
-
SHA1
9c3bed3de5113538ef2b2ca0d99143317b816c66
-
SHA256
afaf749552b6d07877f7ec03504fb5381d5e679d63868254a69e756d802f085d
-
SHA512
cffd419e14b173dab7070a694027f74947e891ceef7284ea9663a0f50c7043662ef0e8182e541ce5313aeddb128c48b5a2238ff67922301b53fc7ad61148a93f
-
SSDEEP
1536:v6CqZdF7WpoeaKnCyY3B2Bb0lcCX0RfAXDYWNdKZ:v6Nd0pohKnCTasAWvA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeee3c6f67b2403e4f1ec03d7016434a_JaffaCakes118
Files
-
aeee3c6f67b2403e4f1ec03d7016434a_JaffaCakes118.exe windows:4 windows x86 arch:x86
ceaec5dc425259c07557f13982188136
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
__setusermatherr
_except_handler3
_c_exit
memcpy
kernel32
GetStartupInfoA
GetModuleHandleA
GlobalAddAtomA
lstrcpyW
lstrcatW
GlobalFindAtomW
lstrcpyA
lstrcatA
lstrlenA
lstrlenW
GlobalFindAtomA
InitAtomTable
lstrcmpA
GlobalDeleteAtom
GlobalAddAtomW
GlobalGetAtomNameW
FindAtomA
GetDiskFreeSpaceExW
DeleteAtom
AddAtomW
GetAtomNameW
FindAtomW
GetAtomNameA
GetDiskFreeSpaceA
user32
GetShellWindow
CharPrevExA
GetDoubleClickTime
PtInRect
MessageBoxA
OffsetRect
GetDC
CharNextExA
SetRectEmpty
GetSystemMetrics
InflateRect
AdjustWindowRect
IsRectEmpty
GetCapture
CopyRect
IntersectRect
SubtractRect
EqualRect
SetRect
ReleaseDC
CharLowerBuffW
GetWindowDC
CharNextA
IsCharUpperA
IsCharAlphaA
CharNextW
IsCharLowerW
CharUpperBuffA
CharLowerW
CharLowerA
CharToOemA
UnionRect
CharUpperBuffW
CharToOemW
DefWindowProcA
RegisterClassA
LoadCursorA
LoadIconA
CharUpperW
CharPrevW
CharPrevA
gdi32
LPtoDP
DPtoLP
GetMetaFileBitsEx
DeleteMetaFile
GetEnhMetaFileBits
d3d8
Direct3DCreate8
dinput8
DirectInput8Create
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ