Static task
static1
Behavioral task
behavioral1
Sample
bd5fe4e8469dcba4f0faebc1f7282838_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd5fe4e8469dcba4f0faebc1f7282838_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd5fe4e8469dcba4f0faebc1f7282838_JaffaCakes118
-
Size
37KB
-
MD5
bd5fe4e8469dcba4f0faebc1f7282838
-
SHA1
c8e16d768e0345359059fe78fb83ff151ee11743
-
SHA256
ad4723c6365970471fb08c018a5651788f07488cf5ae7d293990cde82c5707f6
-
SHA512
224224767cf743403afd7f5ef80d4fe33c3a3579d2536bc0066d894fce42773497fcff7450162a547f3ef9a23d7f6c9f88cd57771397d0d4480aaedf7a611151
-
SSDEEP
768:QWwangMqEuLy7bnEINQgZ+TD4Eka5+HYVGIHHSwWGM+sQ9gXm:QanDiLynTn0nka5+HYQIHsGbsQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd5fe4e8469dcba4f0faebc1f7282838_JaffaCakes118
Files
-
bd5fe4e8469dcba4f0faebc1f7282838_JaffaCakes118.exe windows:4 windows x86 arch:x86
f21ddce3287db72748143fb9aa6e1c75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetVersion
GetCommandLineA
SetHandleCount
GetStdHandle
lstrcatA
GetStringTypeW
lstrcpyA
GetCPInfo
GetStartupInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetFileType
MultiByteToWideChar
CreateFileA
WriteFile
GetModuleFileNameA
lstrcpynA
GetACP
GetOEMCP
lstrcpynW
user32
InsertMenuA
GetCursor
GetMenu
DialogBoxParamW
CreateIcon
GetFocus
DialogBoxParamA
GetWindowTextA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ