Static task
static1
Behavioral task
behavioral1
Sample
cee403bda9ff695e9c3c695308fdffe3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cee403bda9ff695e9c3c695308fdffe3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cee403bda9ff695e9c3c695308fdffe3_JaffaCakes118
-
Size
22KB
-
MD5
cee403bda9ff695e9c3c695308fdffe3
-
SHA1
a459b28401bda91cb02b6bc9d94653851f997815
-
SHA256
69888e5c423ac1d9cba6b37cbb4413ddc05282df51106d7d4756075da110f34c
-
SHA512
b19bcb60e582f84d9fe42c860460a3b146eb0b0cd1f35092ad203cec3e45abe1b76b379d7fada415c5171321e2390d1ffd0f321fa234a8c58fd50d40bb8238cb
-
SSDEEP
384:kPwQjJLagUN8SDa8tnszKwch1bpBdHpYPYP8UFZ+V3s8glU:k3NlyszrKbpXJgYxFgVTsU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cee403bda9ff695e9c3c695308fdffe3_JaffaCakes118
Files
-
cee403bda9ff695e9c3c695308fdffe3_JaffaCakes118.exe windows:1 windows x86 arch:x86
9b27a7a3b57e3d754896612e09ca4c0a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
DdeInitializeA
EqualRect
FrameRect
shell32
DragQueryFileA
RealShellExecuteA
SHCreateShellItem
SHFreeNameMappings
SHGetFileInfoW
StrStrA
SHGetIconOverlayIndexW
gdi32
SetRectRgn
SetRelAbs
SetViewportExtEx
SetWindowExtEx
RoundRect
WidenPath
ResetDCA
GetTextColor
RoundRect
Sections
.text Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE