Static task
static1
Behavioral task
behavioral1
Sample
bb6fd5dc7b119dc5f7b8201f97606896_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb6fd5dc7b119dc5f7b8201f97606896_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb6fd5dc7b119dc5f7b8201f97606896_JaffaCakes118
-
Size
274KB
-
MD5
bb6fd5dc7b119dc5f7b8201f97606896
-
SHA1
0da889f6d0dfefc7a8cad411d1979dfd6cb3cb00
-
SHA256
61370e26cfe8c0747cb1b1d1ff3fb98904abfe1cb3a0f02f89b23535176004ab
-
SHA512
9d99e78377c4611db3e2e4bebb646a7352a52a4081e84a4df1814e9c12c874521c62f508cc1a0f29229f1c0142277f414deb288630996906627f4c686a8cf29a
-
SSDEEP
6144:01KWtWBEgovbjAfe+BRdaYeFj0B8iqPqDftEi4QTiFNsZIBStijZDO:01KWth3MJ9tJDf6KTq8ISIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb6fd5dc7b119dc5f7b8201f97606896_JaffaCakes118
Files
-
bb6fd5dc7b119dc5f7b8201f97606896_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5480e7522aecdc93c1adf20b26c6caf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
MessageBoxA
advapi32
RegCloseKey
oleaut32
SysFreeString
gdi32
CreateFontA
shell32
ShellExecuteA
version
VerQueryValueA
ole32
CoTaskMemFree
wsock32
WSACleanup
wininet
InternetReadFile
avicap32
capCreateCaptureWindowA
winmm
waveOutWrite
msacm32
acmStreamUnprepareHeader
comdlg32
GetSaveFileNameA
Sections
�H�g0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�H�g1 Size: 269KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE