Static task
static1
Behavioral task
behavioral1
Sample
aef13167f5dd7989dc0387deb42e533b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aef13167f5dd7989dc0387deb42e533b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aef13167f5dd7989dc0387deb42e533b_JaffaCakes118
-
Size
532KB
-
MD5
aef13167f5dd7989dc0387deb42e533b
-
SHA1
d0d94a23e17216292a287739a915ed21cd79f2d1
-
SHA256
1a203bad6bc712f04f3581ffd0e719ed8feaba87a4225cf3e2fa67675ef1a314
-
SHA512
0a52b4d36105990d8c5ce1a6473f53989a828ab5b196eb68b506806ac2e1e2314c68b483b20caa4ef18c13ecd9c219bc7c36de26cd7d0abaa1daa586fbdf6adc
-
SSDEEP
768:aOSpAZko5ewRCAS4sIstteeq0dGqWTvBfnuAudyBPFpU1tT:aObZk3rlyetGqW9fuDdestT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aef13167f5dd7989dc0387deb42e533b_JaffaCakes118
Files
-
aef13167f5dd7989dc0387deb42e533b_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4c3943dad80eabdacff5ca356841a38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
DeleteFileA
Sleep
GetSystemTime
Process32Next
GetCurrentProcessId
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
CreateFileA
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
GetLastError
WriteFile
ReadFile
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
user32
FindWindowExA
GetWindowTextA
wsprintfA
shell32
ShellExecuteA
winmm
timeGetTime
ws2_32
gethostname
WSAStartup
gethostbyname
inet_ntoa
rpcrt4
UuidCreateSequential
psapi
GetModuleFileNameExA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE