Static task
static1
Behavioral task
behavioral1
Sample
bbd38cc70ec9681eefaf386bb649f310_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbd38cc70ec9681eefaf386bb649f310_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbd38cc70ec9681eefaf386bb649f310_JaffaCakes118
-
Size
116KB
-
MD5
bbd38cc70ec9681eefaf386bb649f310
-
SHA1
3d6870a946948800a3f0854335eae10c3c15b994
-
SHA256
b24d79b212cd8cb2bb1c1ddf57cdaef6a6143a1078e8c485cc871900ed4d0712
-
SHA512
fc45c5bab3a8d8348e7d6d1f39ac240489af61f648681d5bf567e28d092310a4c0fe7d89a537ab55ec592ab68fb3bca915c0ca471f18e6592b9f77e12d6529fa
-
SSDEEP
3072:zccHkfwkW5ctobrAteRpbAfxeUjrQaxU6zJ2+QlsqhyZOmhtjn18jZhPl:HZct2rZRCdIaxU6zIrRh8Omhtj1qDPl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbd38cc70ec9681eefaf386bb649f310_JaffaCakes118
Files
-
bbd38cc70ec9681eefaf386bb649f310_JaffaCakes118.exe windows:4 windows x86 arch:x86
16f2c19846a20e116d8f43c1ad50c708
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetProcAddress
GetTickCount
LoadLibraryA
user32
DispatchMessageA
GetMessageA
TranslateMessage
advapi32
RegCloseKey
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ