dews
Static task
static1
Behavioral task
behavioral1
Sample
aaf40981d6a04afce2b036eb98670a9d_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
aaf40981d6a04afce2b036eb98670a9d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
aaf40981d6a04afce2b036eb98670a9d_JaffaCakes118
-
Size
11.1MB
-
MD5
aaf40981d6a04afce2b036eb98670a9d
-
SHA1
e202b436f978d78253f0287fc7d1597e4079d5b0
-
SHA256
bbe7d154232e8e07dd0aeeaadca111e11bd6814ea2c3dc1d6926b7a6f2d58693
-
SHA512
267c6496d78e0895a0afab297727b588a130493c92c9a578aedbda138562c2b009a56467fe06017f207396b9208c7c90cf6f3fe5d1f373b9e80cdf98bf39acc3
-
SSDEEP
3072:trLSAaIXFM9X/WWIyOEfEDQMZWecFKmZ:9NWktyH9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource aaf40981d6a04afce2b036eb98670a9d_JaffaCakes118
Files
-
aaf40981d6a04afce2b036eb98670a9d_JaffaCakes118.exe windows:5 windows x86 arch:x86
e4c612f96489c3047672d0aa01e8ee66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
lstrlenW
LoadLibraryA
OpenWaitableTimerW
GetSystemDirectoryA
GetVersionExW
Sleep
FindFirstFileW
GetTickCount
OpenFileMappingW
DeleteFileA
GetModuleHandleW
CompareStringA
CreateSemaphoreW
CreateMutexW
GetProcAddress
GetFileSize
CreateEventA
GetSystemDirectoryW
CreateFileA
SetLocalTime
GetDateFormatW
FindResourceA
LoadLibraryW
GetCommandLineA
user32
GetClassLongA
PostMessageW
DialogBoxParamA
wsprintfA
CreateDesktopW
DrawStateA
GetDlgItemTextA
IsCharLowerA
MessageBoxW
DispatchMessageA
LoadBitmapW
ctl3d32
Ctl3dGetVer
Ctl3dCtlColor
Ctl3dRegister
Ctl3dEnabled
shlwapi
UrlCompareW
PathCommonPrefixA
UrlGetPartW
PathIsURLA
PathCombineA
UrlCanonicalizeW
UrlUnescapeA
PathIsRootW
UrlGetLocationW
UrlEscapeA
UrlCreateFromPathA
Exports
Exports
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 708B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11.0MB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ