Static task
static1
Behavioral task
behavioral1
Sample
bba63df41adcf2cf80c74e4a62539d44_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bba63df41adcf2cf80c74e4a62539d44_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bba63df41adcf2cf80c74e4a62539d44_JaffaCakes118
-
Size
528KB
-
MD5
bba63df41adcf2cf80c74e4a62539d44
-
SHA1
12fac742bb36809c50b31a0d4277c6b9b9a03af4
-
SHA256
04c40a545dd79cb60c88287413a2028c1e60974e2462bf6a744adbe7a0780202
-
SHA512
4d970954fa70cf1e20f85307b69e2a9711248253f1d8ae136682baa0c0eafa607084aaac412d9a16e5ac88737f4861e62153b8c5916f61444a0fe23aed3003c4
-
SSDEEP
3072:k16AtOZ8+8MD5LlKAVFsfQxAJuPtsqUkhKdlR1+cIbqzuwfSRPCjqqNXkyGf3pfF:hQp+JdxsLP1KykRqref3xQAYB7jxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bba63df41adcf2cf80c74e4a62539d44_JaffaCakes118
Files
-
bba63df41adcf2cf80c74e4a62539d44_JaffaCakes118.exe windows:4 windows x86 arch:x86
be7902ea635417174c964a10d705a351
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
SizeofResource
LoadResource
GetModuleFileNameA
GetLastError
CloseHandle
ReleaseMutex
CreateMutexA
Sleep
GetTickCount
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
wsprintfA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 476KB - Virtual size: 475KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ