Static task
static1
Behavioral task
behavioral1
Sample
bdb19672655a007f5301ffb1ef1fa28e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdb19672655a007f5301ffb1ef1fa28e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdb19672655a007f5301ffb1ef1fa28e_JaffaCakes118
-
Size
77KB
-
MD5
bdb19672655a007f5301ffb1ef1fa28e
-
SHA1
d808664a23d02d260ee5ff0eb5c5581b2f36bf4f
-
SHA256
9259b249e2e02a598829bd7f4a582da32d6daadc13db5bd439fe890b5b6610b9
-
SHA512
9a2870c6c5567476cd79622e1512337d5fb3c9066f35d782b1e253163e0bd496d1bd6b3536add14388d3f4bdfd3761de3c10697f26b1a522e8df26f277ff418d
-
SSDEEP
1536:KWte5ScKtdx10DY0N7P1t8LKogF9P3G3OCD/kaH3a1s3c1g8hDV0:bi3K0c4Se9/G+CrkQ3abuQDu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdb19672655a007f5301ffb1ef1fa28e_JaffaCakes118
Files
-
bdb19672655a007f5301ffb1ef1fa28e_JaffaCakes118.exe windows:4 windows x86 arch:x86
3015d0e0bdeb16a5a96d671f2c11c4ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgExA
LoadAlterBitmap
GetSaveFileNameW
GetFileTitleW
user32
UpdateWindow
SetPropA
SetForegroundWindow
GetWindowDC
GetMenu
DrawMenuBar
DeferWindowPos
SetFocus
InflateRect
ModifyMenuA
IsWindowVisible
msi
MsiSetTargetPathW
MsiRecordReadStream
MsiMessageBoxW
kernel32
GetModuleHandleA
GetACP
FreeResource
FindNextVolumeW
FileTimeToLocalFileTime
ExitProcess
DisconnectNamedPipe
CreateSemaphoreA
CloseHandle
AddAtomA
UpdateResourceW
SetComputerNameExW
OutputDebugStringA
OpenEventA
HeapCreate
HeapAlloc
GetVersionExA
GetStartupInfoA
GetOEMCP
GetCommandLineA
oledlg
OleUIBusyW
OleUIEditLinksA
OleUIChangeIconA
dbghelp
FindExecutableImageEx
SymGetSymFromName
SymLoadModuleEx
sym
SymEnumSym
comctl32
FlatSB_SetScrollRange
ImageList_Destroy
ImageList_EndDrag
InitMUILanguage
ole32
CoTaskMemAlloc
CoFileTimeNow
CoCreateInstance
CreateAntiMoniker
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ