Static task
static1
Behavioral task
behavioral1
Sample
bc87a37198cd5c74a776877252bc6514_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bc87a37198cd5c74a776877252bc6514_JaffaCakes118
-
Size
1.1MB
-
MD5
bc87a37198cd5c74a776877252bc6514
-
SHA1
901a702a81e7d44a8e819cc5870afb5af4638615
-
SHA256
2d6584fcb9085990f1c1dfefa1d57cf3c705240fa58b5e2be25e824acaafe45b
-
SHA512
b9f31d3256b8ea9eb5e67da2eb81270d5150ba10cd4574db15fac1547d04d261b31ec51099f2a669b57a7e916afe4762c85f629630c93a472414eb996f2cda73
-
SSDEEP
24576:NfgZnSPjsVKQL9HVUvz/IbCVtVJ48VBKfOuJd0V:WrLuIb+1YfOuJaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc87a37198cd5c74a776877252bc6514_JaffaCakes118
Files
-
bc87a37198cd5c74a776877252bc6514_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3877635be52444727470ffcdb6d5bdd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
AdjustTokenPrivileges
version
GetFileVersionInfoA
wsock32
WSAAsyncGetHostByName
winspool.drv
ClosePrinter
comctl32
ImageList_Add
comdlg32
ChooseColorA
gdi32
Arc
shell32
SHBrowseForFolderA
user32
ActivateKeyboardLayout
winmm
mixerGetControlDetailsA
ole32
CoCreateInstance
oleaut32
CreateErrorInfo
olepro32
ord251
Sections
.text Size: 1.1MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE