Static task
static1
Behavioral task
behavioral1
Sample
696f34f416125b1b3840439723d74019_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
696f34f416125b1b3840439723d74019_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
696f34f416125b1b3840439723d74019_JaffaCakes118
-
Size
40KB
-
MD5
696f34f416125b1b3840439723d74019
-
SHA1
a89a6cb79d2050dbbaa2b36b5194d8197b48213d
-
SHA256
183b065f1a66de822181f77d45dafa27406a43c4133101ff173fa150105497f9
-
SHA512
4d63f00ece62a01435a4af154c0a69e2e9e7b33cf9ae62c8d6c49703ce00fde9a87c33418e768ce3a413a008d9c33afebc46e7c058bfe624f437633aeb5a86cb
-
SSDEEP
768:shxYQ1YaodCOYc1Tz5WkEeteuoCCBdR5uD4z:shiykC5qz5WkEeteuzC3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 696f34f416125b1b3840439723d74019_JaffaCakes118
Files
-
696f34f416125b1b3840439723d74019_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc6770caf29ff11a01a70922388f8dfc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
FindClose
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
ExitProcess
user32
MessageBoxA
PeekMessageA
MessageBoxA
PostQuitMessage
SetTimer
KillTimer
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 261KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE