Static task
static1
Behavioral task
behavioral1
Sample
bdb3e7d787188093d70e2bc61cbc9391_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bdb3e7d787188093d70e2bc61cbc9391_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdb3e7d787188093d70e2bc61cbc9391_JaffaCakes118
-
Size
57KB
-
MD5
bdb3e7d787188093d70e2bc61cbc9391
-
SHA1
fee1a276d822afe77d9652bec879ba252c2972dc
-
SHA256
fbdbedd2ae20107beb95b440f3eaa0438535e77d3c376f49e4c175c442942821
-
SHA512
5bb2f3dbd1093678442a64923f7855219d3aa8ee9feeb6c79e6684581dc77f4f31caaf42630e06dbc49d4fd32dae9e337078fb0b9851440db33fb576909100a2
-
SSDEEP
768:shxYQ1YaedCOYc1Tz5WkEeteuoC5BdR5uD4z:shiySC5qz5WkEeteuz53f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdb3e7d787188093d70e2bc61cbc9391_JaffaCakes118
Files
-
bdb3e7d787188093d70e2bc61cbc9391_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc6770caf29ff11a01a70922388f8dfc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
FindClose
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
ExitProcess
user32
MessageBoxA
PeekMessageA
MessageBoxA
PostQuitMessage
SetTimer
KillTimer
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 261KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE