Static task
static1
Behavioral task
behavioral1
Sample
2695be6cfde05f586a33e5c5d77ecd5b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2695be6cfde05f586a33e5c5d77ecd5b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2695be6cfde05f586a33e5c5d77ecd5b_JaffaCakes118
-
Size
267KB
-
MD5
2695be6cfde05f586a33e5c5d77ecd5b
-
SHA1
d702035ef645da95b6ae5d179b855b857e70e320
-
SHA256
e6494e1314852346119b71e50917152a6309e1ba58a1882771d05c9df3b73924
-
SHA512
39c889205e9ebf388fbaa59549e4bdfc8fb75f9834b7a5ece6952b03b54949df2ae303a560cf09d4c7fcfde36736a28b3387f922b36da93d895688b28c4eec35
-
SSDEEP
6144:lr/+DFEEomZRdnHF9B8hOLsa6cYPQOwORP7zCipP7Xjq1Q651d:lr/+RnHF9uhOpYPhRT2W7X+7fd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2695be6cfde05f586a33e5c5d77ecd5b_JaffaCakes118
Files
-
2695be6cfde05f586a33e5c5d77ecd5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab876df300e191706a70dc8a4911f775
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelWaitableTimer
GetThreadTimes
GetLargestConsoleWindowSize
CompareStringA
GetModuleHandleA
GetShortPathNameA
AddAtomA
GetUserDefaultLangID
GetConsoleCP
SetEvent
TlsGetValue
GetThreadLocale
CreatePipe
CreateMutexA
TlsFree
GetExitCodeThread
IsDBCSLeadByte
GetThreadPriority
GetOEMCP
VirtualAlloc
ReleaseMutex
user32
GetClassInfoExA
CloseWindow
GetFocus
IsWindowVisible
InvalidateRect
ReleaseDC
IsIconic
GetForegroundWindow
GetClassNameA
GetActiveWindow
GetWindowTextA
ShowWindow
GetDC
ValidateRect
ReleaseDC
RegisterClassA
GetWindow
GetSystemMetrics
GetWindowTextLengthA
dsound
DirectSoundCreate
DirectSoundEnumerateA
DllCanUnloadNow
DllGetClassObject
GetDeviceID
mscms
CheckColors
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ