Static task
static1
Behavioral task
behavioral1
Sample
bb886200e9ef8b7fed6cee1319225ffe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb886200e9ef8b7fed6cee1319225ffe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb886200e9ef8b7fed6cee1319225ffe_JaffaCakes118
-
Size
170KB
-
MD5
bb886200e9ef8b7fed6cee1319225ffe
-
SHA1
76c5f0a77e62f3e2017fde262b446bf95c4921d6
-
SHA256
d25d24568548d13d42d933063ff1ee9a535a0c745e4c7f0d06f3e8107137e454
-
SHA512
efcec669971fedf73c0d091a359e7b47de6a2f4fb189b87a1c904bba9e1ba3631acdfeae0611b934fe3385f5600565191ea0934d3f925bff091ca2c8d2f267cd
-
SSDEEP
3072:vf9QygCthdG4k1G56YOfYXUJ6ScAdYhDWjr0bhBj3HDcg:qFCbU4rsvwS/ihDWjYbhd3HR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb886200e9ef8b7fed6cee1319225ffe_JaffaCakes118
Files
-
bb886200e9ef8b7fed6cee1319225ffe_JaffaCakes118.exe windows:4 windows x86 arch:x86
b661a775326ce021a7cbf3c225fdc453
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
setupapi
InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status
kernel32
GetModuleHandleA
GlobalAddAtomW
GetConsoleMode
CreateFileW
GetEnvironmentVariableW
GetProcAddress
TlsAlloc
GetConsoleCP
CreateFileMappingA
SetLastError
GetVersionExA
TlsSetValue
MapViewOfFile
InterlockedDecrement
LoadLibraryExW
GetModuleHandleW
ExitProcess
EnumResourceNamesA
TlsGetValue
GetLastError
HeapFree
CreateFileA
GetTempPathW
VerLanguageNameA
InterlockedIncrement
UnmapViewOfFile
GetProcessHeap
FlushFileBuffers
TlsFree
WriteConsoleW
GetVersionExW
HeapAlloc
Sleep
shlwapi
PathAddBackslashW
winmm
mciSendCommandW
sndPlaySoundW
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ