Static task
static1
Behavioral task
behavioral1
Sample
295f7c76383525328769006bbd8bbf95_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
295f7c76383525328769006bbd8bbf95_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
295f7c76383525328769006bbd8bbf95_JaffaCakes118
-
Size
106KB
-
MD5
295f7c76383525328769006bbd8bbf95
-
SHA1
e199dda7a41ba294d00a37ca3249bf82877d3a8e
-
SHA256
699a90a66ad418e0573a3e61979260ce29f3d7f5e1cd17e2863e2978584aa3f0
-
SHA512
db003e4ea16c77714e55fff9a0cebf3c1aac7b9bfb803382528953d10c8ed0f42b14cc7e787f28e2e2ee56b2f85cbe61f771c50fc3183d938ca1245634920a89
-
SSDEEP
3072:ScwHvhJSVziQQXv4wpMiFKVIAc2ATNN59:RS81iQQXnpMigmNBN59
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 295f7c76383525328769006bbd8bbf95_JaffaCakes118
Files
-
295f7c76383525328769006bbd8bbf95_JaffaCakes118.exe windows:4 windows x86 arch:x86
89aa55fcb7984737a5962f01052b7f30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint
kernel32
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA
wininet
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpRemoveDirectoryA
GopherCreateLocatorA
HttpAddRequestHeadersA
IncrementUrlCacheHeaderData
InternetAutodial
Sections
.text Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE