Static task
static1
Behavioral task
behavioral1
Sample
3a14d59a8662aaebfd940c9797ff0586_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a14d59a8662aaebfd940c9797ff0586_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a14d59a8662aaebfd940c9797ff0586_JaffaCakes118
-
Size
55KB
-
MD5
3a14d59a8662aaebfd940c9797ff0586
-
SHA1
25ef4a2c6441e0a89e9a7fb9dea34cf00cfb492d
-
SHA256
d8a4ba8ac3cd67b04d0a038f70c107c96aee4d97de6a1310aa3e9d7b908ca989
-
SHA512
e6c63f87f53ad55306f349a2e78559196d2b46c4d05b640a47d3f2755a4e01fc5cc375a2805f83b1e138d2b4e42afb2cb2b011ee69fb7cba82d13e3d4c1fd46a
-
SSDEEP
1536:qDoh5KZn8SeWQFgDNyJ2obbHf0/MVHinZ:qDohan8SeoDyHfK9Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a14d59a8662aaebfd940c9797ff0586_JaffaCakes118
Files
-
3a14d59a8662aaebfd940c9797ff0586_JaffaCakes118.exe windows:4 windows x86 arch:x86
37dbf270bfc619f4b7a89f6c0900c7d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EmptyClipboard
EndMenu
EndPaint
FillRect
GetFocus
LoadCursorA
DeleteMenu
MessageBoxIndirectA
OffsetRect
SetCursor
SetMenuInfo
ShowCaret
CharUpperBuffA
CharLowerA
ChangeMenuA
LoadImageA
wsprintfA
kernel32
OpenFileMappingA
FlushFileBuffers
EnumResourceTypesA
lstrcmpA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE