Static task
static1
Behavioral task
behavioral1
Sample
bded72e29e7641db058583afcc2b4e26_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bded72e29e7641db058583afcc2b4e26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bded72e29e7641db058583afcc2b4e26_JaffaCakes118
-
Size
609KB
-
MD5
bded72e29e7641db058583afcc2b4e26
-
SHA1
a1c9282a197f9e3c1c05b2094094bf713a41bb5a
-
SHA256
92522ddcf8aedf5e4aeb0426819b8596959bd4eb9ade0340cb18486de662054c
-
SHA512
a8874584196541539403caa39901a285702d155c2017ebb2a2c64c61dfd6f0c3b169f5f907d7bc9097b0289c09cc14a1dfbc2437eef725b198cf770dbd17f185
-
SSDEEP
12288:+yHx0H+pgoJdDRUD0Y5ur70OPwvck3feAHI7aTnEF/k/rbeA3K:5HyepgoJ4bc0OPwleAFWiHK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bded72e29e7641db058583afcc2b4e26_JaffaCakes118
Files
-
bded72e29e7641db058583afcc2b4e26_JaffaCakes118.exe windows:4 windows x86 arch:x86
450696b966d8727f7def654307d701ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
GetConsoleCursorInfo
WritePrivateProfileSectionW
UnmapViewOfFile
LeaveCriticalSection
GetFileType
CompareStringW
GlobalReAlloc
GetCommandLineW
ConnectNamedPipe
GetProcessHeap
IsValidLocale
GetBinaryTypeA
EndUpdateResourceA
CancelIo
EnumSystemCodePagesW
LoadLibraryExA
GetSystemTime
GetModuleFileNameW
GetVolumeInformationW
ExitThread
SetCurrentDirectoryA
SuspendThread
WriteProcessMemory
WaitNamedPipeA
VirtualQuery
FreeLibrary
GetOverlappedResult
SetLastError
FlushFileBuffers
GlobalFree
_hread
ExitProcess
user32
UpdateWindow
DrawAnimatedRects
MessageBoxIndirectW
SendMessageTimeoutW
ChildWindowFromPoint
GetKeyboardLayoutNameW
DispatchMessageA
GetMonitorInfoW
SetWindowLongA
ReleaseDC
FindWindowW
GetClipboardFormatNameA
version
VerQueryValueA
advapi32
CryptAcquireContextA
RegisterServiceCtrlHandlerW
RegOpenKeyA
SetTokenInformation
GetSecurityDescriptorGroup
LookupAccountSidA
RegQueryInfoKeyW
CryptCreateHash
LogonUserW
ws2_32
WSAAsyncGetHostByName
recv
WSAConnect
getprotobyname
ole32
ReadClassStg
ReadClassStm
oleaut32
QueryPathOfRegTypeLi
SafeArrayRedim
LoadTypeLi
SafeArrayUnaccessData
SafeArrayPutElement
Sections
.text Size: 2KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ