Static task
static1
Behavioral task
behavioral1
Sample
aefc87c175d32256cf4dc2ac8cd4395c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aefc87c175d32256cf4dc2ac8cd4395c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
aefc87c175d32256cf4dc2ac8cd4395c_JaffaCakes118
-
Size
133KB
-
MD5
aefc87c175d32256cf4dc2ac8cd4395c
-
SHA1
58a81bfde2793fc3d28f84037a4fdc6a08b40c82
-
SHA256
4c71484c277c195051f5fcf1132ea62db19d8cbf1afae961b62335f01d77b590
-
SHA512
15e185996bcbd079e33f09763a1d934673bd18ad0e39eb1bbe080420d04ca9b58a75467d24f725145a667d014a3696723eefbe0259abb66cd116c04e69cc9c2a
-
SSDEEP
3072:FkPC80mgKY4/CYqbeEHiY9wqgRC5u6k8OeInhiFkRcOYnlZi:FkPCa7Y4qNxQLRsu6k8zI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aefc87c175d32256cf4dc2ac8cd4395c_JaffaCakes118
Files
-
aefc87c175d32256cf4dc2ac8cd4395c_JaffaCakes118.exe windows:5 windows x86 arch:x86
9bb166b82db46025ea599b2e86e54f36
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
VirtualAllocEx
CreateFileA
GetSystemDirectoryA
user32
LoadIconW
LoadCursorA
gdi32
GetStockObject
advapi32
RegOpenKeyExA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ