Static task
static1
Behavioral task
behavioral1
Sample
aeefa29c1a99b048a2a63e1d96d7d75e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aeefa29c1a99b048a2a63e1d96d7d75e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeefa29c1a99b048a2a63e1d96d7d75e_JaffaCakes118
-
Size
118KB
-
MD5
aeefa29c1a99b048a2a63e1d96d7d75e
-
SHA1
5c68d7045b5974fd02690d1a571d866e3309d6b0
-
SHA256
0df7f258ea133931f3dd88afb69581974f2301f96ff0d834080330b1f9e4ad00
-
SHA512
9283870d100589b61751054761379a9bcaef2e6e15a894348bdc1b66de91eb72853ec9dd7888709436e8cd9ff5d578eab18c5b77bd318efc1d6ff7f7ca102078
-
SSDEEP
768:sgnwTojbNK1VYL7YynFU5CEuNca1DiEDOg3E4gW4OaYU5SGLUQK0tAcut:sVoXnF+Aj1Py4E4g+fU51LUwtAcu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeefa29c1a99b048a2a63e1d96d7d75e_JaffaCakes118
Files
-
aeefa29c1a99b048a2a63e1d96d7d75e_JaffaCakes118.exe windows:1 windows x86 arch:x86
101cfd674831dc5afb086f5021f755fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
TerminateProcess
WaitForSingleObject
GetTickCount
InterlockedIncrement
WriteFile
WaitForSingleObject
MultiByteToWideChar
lstrcpyW
GetACP
VirtualAlloc
GetModuleHandleW
VirtualFree
SetUnhandledExceptionFilter
TerminateProcess
GetProcessHeap
lstrcpyW
GetTickCount
Sleep
LoadLibraryA
SetEvent
LocalAlloc
UnhandledExceptionFilter
GetStartupInfoA
HeapFree
WriteFile
SetLastError
MultiByteToWideChar
SetLastError
GetTickCount
GetModuleHandleW
LocalFree
SetFilePointer
GetVersionExA
SetFilePointer
WaitForSingleObject
VirtualAlloc
LocalAlloc
lstrcmpiW
EnterCriticalSection
ReadFile
WaitForSingleObject
SetFilePointer
GetModuleHandleA
GetCurrentProcess
LocalFree
GetCommandLineA
GetModuleFileNameA
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
DeleteCriticalSection
Sleep
FreeLibrary
Sleep
VirtualFree
VirtualAlloc
GetProcAddress
SetEvent
GetACP
GetStartupInfoA
CreateFileW
GetModuleHandleA
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
TerminateProcess
EnterCriticalSection
LocalAlloc
TerminateProcess
GetCommandLineW
WideCharToMultiByte
InterlockedDecrement
GetACP
GetCommandLineW
LoadLibraryA
HeapDestroy
GetCommandLineW
HeapDestroy
TerminateProcess
GetLastError
GetTickCount
VirtualAlloc
GetStartupInfoA
QueryPerformanceCounter
TerminateProcess
LoadLibraryW
HeapAlloc
GetCurrentThreadId
ReadFile
CreateThread
ExitProcess
SetUnhandledExceptionFilter
HeapFree
VirtualFree
DeleteCriticalSection
InterlockedDecrement
HeapReAlloc
LeaveCriticalSection
GetLastError
lstrlenW
CreateThread
InterlockedIncrement
GetModuleFileNameA
VirtualFree
VirtualFree
ReadFile
lstrcmpiW
QueryPerformanceCounter
DeleteCriticalSection
HeapDestroy
QueryPerformanceCounter
SetEvent
HeapAlloc
LeaveCriticalSection
GetStartupInfoA
MultiByteToWideChar
InterlockedDecrement
lstrcpyW
ReadFile
GetCurrentThreadId
HeapDestroy
HeapAlloc
lstrcmpiW
Sections
.data Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE