Static task
static1
Behavioral task
behavioral1
Sample
bb1c3a07dbdb616216a7be7240637414_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb1c3a07dbdb616216a7be7240637414_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb1c3a07dbdb616216a7be7240637414_JaffaCakes118
-
Size
96KB
-
MD5
bb1c3a07dbdb616216a7be7240637414
-
SHA1
1c022671b69ac3dcbe8ef1ccc888482f539a9fd7
-
SHA256
98e88aca432b33324cbf6275c6a221c8b3ad6b1eb6895989cb43f9450fa167a9
-
SHA512
f9e9270bd41c65e556064add7ba36f37154aa21b197adce1e63cb5bbd03d525f0fc44ae7953b55c542249fa7eeba34b66dde642e3faa0945dddeb687b9fb1778
-
SSDEEP
1536:k/N/LYvuPBtkfUAaKNxJ6+UDm5dQu1AIkHUvPUxiAg:kFsuPrLNXbatN0UnUxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb1c3a07dbdb616216a7be7240637414_JaffaCakes118
Files
-
bb1c3a07dbdb616216a7be7240637414_JaffaCakes118.exe windows:4 windows x86 arch:x86
614b8902b3e3e4c37a2ed1f8cc385e38
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateNamedPipeW
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
ResetEvent
RtlUnwind
SizeofResource
Sleep
WinExec
lstrcpynW
user32
TrackPopupMenu
UpdateWindow
LoadMenuA
GetCapture
FrameRect
DrawIconEx
ClientToScreen
TrackPopupMenuEx
comctl32
ImageList_AddMasked
InitializeFlatSB
ImageList_Write
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_SetScrollRange
GetMUILanguage
ImageList_SetFlags
ImageList_DragShowNolock
ole32
CoGetMalloc
CoTaskMemAlloc
CoTaskMemFree
CreateAntiMoniker
StringFromGUID2
CoFileTimeNow
CoCreateInstance
CoCreateGuid
CLSIDFromString
CoBuildVersion
dbghelp
SymLoadModule64
SymGetOptions
SymGetLinePrev64
SymGetModuleBase64
ImageNtHeader
ImageDirectoryEntryToData
FindExecutableImage
oleaut32
SysReAllocString
SafeArrayAllocDescriptor
SafeArrayAccessData
RevokeActiveObject
OleLoadPicturePath
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ