Static task
static1
Behavioral task
behavioral1
Sample
bdccb706c558897afedc0004fdb6de5b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bdccb706c558897afedc0004fdb6de5b_JaffaCakes118
-
Size
917KB
-
MD5
bdccb706c558897afedc0004fdb6de5b
-
SHA1
bcbd31461f462ab6eb50731c5b76359bb56d3eda
-
SHA256
3b90c940f579d236aebeb7ab3b77ddad30ab99e6609fdf336cfbbba941742bc8
-
SHA512
a87a8597c3b7bd9a9bcab638e3329e702dcdd9fafbfc18ec20c6dc00ee06d05b4310a6c2dfb9e31d1bb00ab037d313261f242b6bee1aad92ce75a7f057b86cd7
-
SSDEEP
24576:ljRDgU+HVAPkbS07Xyj3dDyFOQW4MYvO8nGE3n3MjoZz/3ddGbo:pRV+yPkR7iAOtIG2GYn80ZzFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdccb706c558897afedc0004fdb6de5b_JaffaCakes118
Files
-
bdccb706c558897afedc0004fdb6de5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fqhlicxz Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
esreemiz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE