Static task
static1
Behavioral task
behavioral1
Sample
bcbdcecee33bccddf9c6464c65d276b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcbdcecee33bccddf9c6464c65d276b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcbdcecee33bccddf9c6464c65d276b8_JaffaCakes118
-
Size
17KB
-
MD5
bcbdcecee33bccddf9c6464c65d276b8
-
SHA1
704f64c6da0ca0dbe4b87b4d1d156c5dd20085ab
-
SHA256
4827d7921a024bdc8b4c0899c90d1aa5a457161076d07e5f7d1d9b0b0e01ce4c
-
SHA512
465cefb9eaf5e42b089bdca98d6186f6fb9a9c83e8526e5a38324ad4c30a8ebcadf2ff90ed9f64e78c3f6fed0dc7d148d1dee5ac33c00c213ffe0666cde396c5
-
SSDEEP
384:8h/8eNHoOOI9Hj0wAf+MFJaDw2OT5GW0SKTqCfXEa8i:8+eIOrjAf+MFM+fKTqC8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcbdcecee33bccddf9c6464c65d276b8_JaffaCakes118
Files
-
bcbdcecee33bccddf9c6464c65d276b8_JaffaCakes118.exe windows:5 windows x86 arch:x86
0931e97555ac33eb10aa9539fe890070
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetSystemInfo
VirtualQuery
GetLastError
MapViewOfFile
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
CloseHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 13.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ