Static task
static1
Behavioral task
behavioral1
Sample
aff3de0b1c9212a49657b6cb5167916c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aff3de0b1c9212a49657b6cb5167916c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aff3de0b1c9212a49657b6cb5167916c_JaffaCakes118
-
Size
195KB
-
MD5
aff3de0b1c9212a49657b6cb5167916c
-
SHA1
51abe40ed83fe19199487ce57f1df1845f727b46
-
SHA256
67ff6ec1c14e0ce2e08f8bbe6f227477438d8d46a4ff1394b20b512ddc0f7ab5
-
SHA512
467ef11432a459b435055a2cd8953e4a85ed09b07b737de38b940b383b0b8c82f732ede53fec3d7d3879b7233c047e39b5bed7158320f354846030c54b4b2f95
-
SSDEEP
3072:2kFkQBYkLdpwWyn8BHP8Cl0mbCStI+LV8eW5o1wIuw/QCt+fPPP69MdKJ:2zQjTwMLbCwuFr9w/Q0+H369NJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aff3de0b1c9212a49657b6cb5167916c_JaffaCakes118
Files
-
aff3de0b1c9212a49657b6cb5167916c_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc3dbb1e799e9aa9db9c744e9fa722e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleOutputCP
GetDriveTypeA
GetLastError
SetErrorMode
InterlockedExchange
LockResource
RaiseException
GetLocaleInfoA
GetACP
LoadLibraryExA
FileTimeToLocalFileTime
HeapCreate
VirtualProtect
GlobalFree
Sleep
GlobalUnlock
GlobalDeleteAtom
EnterCriticalSection
CloseHandle
GlobalAddAtomA
GetStdHandle
user32
GetCursorPos
ValidateRect
OemToCharW
GetParent
GetWindowTextA
GetMenuItemInfoA
GetWindow
GetClassNameA
GetActiveWindow
DrawEdge
EndPaint
ReleaseDC
DrawTextA
BeginPaint
ShowWindow
GetFocus
ClipCursor
IsIconic
SetForegroundWindow
wtsapi32
WTSLogoffSession
WTSOpenServerA
WTSQueryUserToken
WTSCloseServer
WTSFreeMemory
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ