Static task
static1
Behavioral task
behavioral1
Sample
bedd7c4198b7b785d24e443dc5f5f288_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bedd7c4198b7b785d24e443dc5f5f288_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bedd7c4198b7b785d24e443dc5f5f288_JaffaCakes118
-
Size
173KB
-
MD5
bedd7c4198b7b785d24e443dc5f5f288
-
SHA1
8282705b544a79c28081566dd609acfd65a20209
-
SHA256
3a495d4656766c5bbbf2ad0a8b75546b5da252f903b548d93e7a86e8b47f88fc
-
SHA512
36147da5bd05abdc93d393ede3b77ad7d4359742f1469d0dba57e781d478ac21ebd8b25fcb238bbf6cd069c87c1ef4007cd83507ac03f9dbac52811d8d757a10
-
SSDEEP
3072:62piksEoCJQCVjl5w+kpquPbUBTuzwXFbW8gqcxVxOtlkiiC0:623aCVjl5UpqYbUVuzwXFiqcxV1ii
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bedd7c4198b7b785d24e443dc5f5f288_JaffaCakes118
Files
-
bedd7c4198b7b785d24e443dc5f5f288_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fc3e8da6a090f24e24d45866c7de2dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomW
GetCurrentProcessId
TlsFree
GetCurrentProcess
SetUnhandledExceptionFilter
HeapFree
GetCurrentThread
GetStartupInfoA
GlobalMemoryStatus
GetComputerNameA
DeviceIoControl
GetModuleHandleW
TlsGetValue
SetHandleCount
GetVersionExA
GetVersion
GetFileType
CloseHandle
RaiseException
GetDiskFreeSpaceA
EnumResourceNamesA
HeapAlloc
GetCommandLineA
OutputDebugStringW
SetLastError
GetLocalTime
RtlUnwind
GetStdHandle
GetSystemTimeAsFileTime
TlsAlloc
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
TerminateProcess
GetProcessHeap
TlsSetValue
InterlockedExchange
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
gdi32
Rectangle
CloseFigure
LineTo
FillPath
EndPath
PolyBezierTo
GetClipBox
SetBrushOrgEx
GetGraphicsMode
CreatePatternBrush
GetStockObject
PolylineTo
MoveToEx
IntersectClipRect
BeginPath
SetGraphicsMode
GetWorldTransform
SetROP2
SelectClipPath
PolyDraw
Sections
.text Size: 92KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ