Static task
static1
Behavioral task
behavioral1
Sample
695e556f7db3e41bc90e32e45ffd5d25_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
695e556f7db3e41bc90e32e45ffd5d25_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
695e556f7db3e41bc90e32e45ffd5d25_JaffaCakes118
-
Size
58KB
-
MD5
695e556f7db3e41bc90e32e45ffd5d25
-
SHA1
cf5363e31d3a59436fc473db3f7522f31729cf5f
-
SHA256
6f1afb11c62003f5981827f6ee1efdfc15870f57097383188f3af17e1196ee19
-
SHA512
9f5d3f4a847cb7c2a040588b62331a82ed0a26f40e1de2ee7f7ac2e0e3d6bf614dd41d3e04b86671156a36c55ac098f1be427c9a08f8be611795000fe44692b1
-
SSDEEP
1536:dDKZl5Aj+dlvmoocD0/BwEmHBqJY434mGMhybK5AIU:dDKP5AKvmkQ/BwErY49kbtIU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 695e556f7db3e41bc90e32e45ffd5d25_JaffaCakes118
Files
-
695e556f7db3e41bc90e32e45ffd5d25_JaffaCakes118.exe windows:4 windows x86 arch:x86
233d43c85d3e6d8c909589d1c7274413
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCursor
LoadImageA
GetMessageA
DrawTextA
kernel32
SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep
ole32
CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
code Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE