Static task
static1
Behavioral task
behavioral1
Sample
bcbd347d9669229af19761c7e9237654_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bcbd347d9669229af19761c7e9237654_JaffaCakes118
-
Size
44KB
-
MD5
bcbd347d9669229af19761c7e9237654
-
SHA1
8983e00b8b5e42d744a65d22a60e96d047e220b2
-
SHA256
2a23aed92a8f49c6d72d766be58a9931f4744a2487deb3eef4070439931dd6e6
-
SHA512
fbc56e706d1867e4d750dbe4a0c24530ef7010c6087dab16084ae040e79f0c7f14e6ef3c974969d290bbd228149e8b0533e8941e112746b23cc7c65738fc209e
-
SSDEEP
768:iLkEZBd3RL1017g+LIUUrMsR1BtgBqXAdc9Pnx4fyL9dBIELGlJK4/ScNt:jCBZRLgbf8Jg6Ad8ayL9LIkGlJAcN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcbd347d9669229af19761c7e9237654_JaffaCakes118
Files
-
bcbd347d9669229af19761c7e9237654_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca70489da141826fe495e15d12b7367f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
FindWindowExA
PostMessageA
SendMessageA
kernel32
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetShortPathNameA
GetTempPathA
Sleep
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 43KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE