Static task
static1
Behavioral task
behavioral1
Sample
bbd75631a880fbed585a1bea7ada2ca0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbd75631a880fbed585a1bea7ada2ca0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbd75631a880fbed585a1bea7ada2ca0_JaffaCakes118
-
Size
599KB
-
MD5
bbd75631a880fbed585a1bea7ada2ca0
-
SHA1
419f73db364a6dfeb5ca7225206da0f4cd481ca3
-
SHA256
566f54916246f0412600ebe73a6814ad2f5794b3cbe642f957d731a0927c785d
-
SHA512
59e613c4eb342c1a80086c5d69743c16e85a25dcde88bfe506fce796f3eb6aee1f1b1ab4cd43d14813bc7fa486cfba455ac5a04d661e875a5959bd6b61015058
-
SSDEEP
12288:CoL/vfLOqu5iVRd8s4CqlA3xlRNx3pYK+R4QHwwbYemxeiJnaDf:CoLvLTu5iVddsOn1V+R4QHhbYrxeWna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbd75631a880fbed585a1bea7ada2ca0_JaffaCakes118
Files
-
bbd75631a880fbed585a1bea7ada2ca0_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 176KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rerdfmvp Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cbggddmt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE