Static task
static1
Behavioral task
behavioral1
Sample
bd6b590b7ccf43066f5c375dbd8bf064_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd6b590b7ccf43066f5c375dbd8bf064_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd6b590b7ccf43066f5c375dbd8bf064_JaffaCakes118
-
Size
117KB
-
MD5
bd6b590b7ccf43066f5c375dbd8bf064
-
SHA1
92af111fb38b71f46be3d9402d838874753810a8
-
SHA256
812922e5b99adb5d104e5638bbf50d12067729e261462b076d8c1a4b2306a11f
-
SHA512
19bd2d83d49a42e504483c8407240764218b8e0fe73b3ab51c1beb7565ce54d230122540e83aa74161e62af1c522714ae99b9695fc61aab59b6b8d8c96d074e1
-
SSDEEP
3072:TXquYR0iAndYJA5IEmlB11wBlC3bH1d4RUKRE:TBgEdYJk5mlySj1qRUK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd6b590b7ccf43066f5c375dbd8bf064_JaffaCakes118
Files
-
bd6b590b7ccf43066f5c375dbd8bf064_JaffaCakes118.exe windows:5 windows x86 arch:x86
eb8d84c7e674a68c3c9e1c66b1c64318
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetEnvironmentStringsW
GetCommandLineA
GetCurrentThread
GetCommandLineW
GetCurrentProcessId
CreateSemaphoreA
CreateEventA
IsDebuggerPresent
GetModuleHandleW
CreateMutexA
GetVersionExA
GetStdHandle
GetPriorityClass
GetTickCount
VirtualAlloc
GetLastError
GetEnvironmentStrings
GetStartupInfoW
user32
LoadCursorA
LoadIconA
LoadCursorFromFileA
ReleaseDC
GetWindowDC
SetWindowTextA
gdi32
GetRasterizerCaps
GetTextColor
SetTextAlign
GetTextMetricsA
AbortDoc
crypt32
CryptBinaryToStringA
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
memcpy
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ