Static task
static1
Behavioral task
behavioral1
Sample
bd4e53d0ca48cfa71b0e5e6489cfecea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd4e53d0ca48cfa71b0e5e6489cfecea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd4e53d0ca48cfa71b0e5e6489cfecea_JaffaCakes118
-
Size
427KB
-
MD5
bd4e53d0ca48cfa71b0e5e6489cfecea
-
SHA1
5ff0b9a8728c305354b28575762a28ccbef62202
-
SHA256
986c6079856a063f4d31de1f4410eefe8ccc3934b25f9e971459a6fe18a99122
-
SHA512
88ec559f7f7c6bdfedd53f40be18cf6191e7c67203e5abef84f71553c2667ec5a1b2a0e71e4367709ba9a4b7565fac15f98b1ac3537daecefb2a14c62e6c1ed3
-
SSDEEP
6144:8cwuO3NYDsNAdnQWMAN6l5yjiqXRZtWpfvxs5kiha0Al3EsRy2LaQt:8c7O3N50BMukyHgG51A5WQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd4e53d0ca48cfa71b0e5e6489cfecea_JaffaCakes118
Files
-
bd4e53d0ca48cfa71b0e5e6489cfecea_JaffaCakes118.exe windows:4 windows x86 arch:x86
acd5d75433a847dee807be33faa1bd6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
GlobalAddAtomA
GetLocaleInfoA
RaiseException
GetStdHandle
LockResource
LoadLibraryExA
FoldStringA
GlobalDeleteAtom
GetDriveTypeA
HeapCreate
InterlockedExchange
EnterCriticalSection
GlobalUnlock
SetConsoleCP
GlobalFree
GetACP
VirtualProtect
SetErrorMode
Sleep
user32
GetMenuItemInfoA
CharToOemBuffA
GetParent
DrawTextA
EndPaint
ValidateRect
GetFocus
GetActiveWindow
ReleaseDC
ClipCursor
DrawEdge
GetCursorPos
ShowWindow
GetWindowTextA
BeginPaint
GetWindow
GetClassNameA
SetForegroundWindow
IsIconic
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerFindFileA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ