Static task
static1
Behavioral task
behavioral1
Sample
bd601bff87f6fa6416154fe8ce407306_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd601bff87f6fa6416154fe8ce407306_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd601bff87f6fa6416154fe8ce407306_JaffaCakes118
-
Size
163KB
-
MD5
bd601bff87f6fa6416154fe8ce407306
-
SHA1
d8061488d46259951371a4c06d73cdc193918aa3
-
SHA256
c8077978ffb4cae1f21b1d9b4fe00f77da7288966729a05b24b06f79ee13c772
-
SHA512
584c0cc714ff4125a7a213366b93c880d5cf60b737e53058a6f559d4d4a34c6f71303db7f9d740224ac868d364fbf2a6a37244e78dbcae3388af2d433baba348
-
SSDEEP
3072:CmIvZVnkAQXetLsSw9qa5UGgTRe9/i9NMoowUqNloTqrznb4/iPohKO9MOS:HIvptLLC/92PUBTqnsrhKuM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd601bff87f6fa6416154fe8ce407306_JaffaCakes118
Files
-
bd601bff87f6fa6416154fe8ce407306_JaffaCakes118.exe windows:4 windows x86 arch:x86
53bc6e4a76f479fb9649a653a2c65602
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
CoTaskMemAlloc
StringFromGUID2
CoUninitialize
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemFree
CoCreateInstance
CoInitialize
StringFromCLSID
kernel32
InitializeCriticalSection
GetLastError
lstrcpyA
GetACP
OutputDebugStringW
GetProcessAffinityMask
GetCPInfo
lstrcpyA
MultiByteToWideChar
lstrcmpiW
EnumResourceNamesW
GetTickCount
LockResource
FindClose
FreeEnvironmentStringsW
lstrcpyW
WideCharToMultiByte
lstrlenW
GlobalFree
GlobalAlloc
GetModuleHandleW
shlwapi
PathCombineW
PathFileExistsW
user32
TranslateMessage
GetDC
KillTimer
GetMessageW
PostThreadMessageW
CharNextW
SendMessageA
CharUpperW
SetTimer
DispatchMessageW
wsprintfW
UnregisterClassA
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ