Static task
static1
Behavioral task
behavioral1
Sample
bf34649a37446fac7a7f27549a9f4b27_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bf34649a37446fac7a7f27549a9f4b27_JaffaCakes118
-
Size
2.8MB
-
MD5
bf34649a37446fac7a7f27549a9f4b27
-
SHA1
5462d9405424a96b09b6ffca53e9f742e572b4b9
-
SHA256
1574e5fddd307140ba0f411f18ab81ab7256a8de601e4e999621a6493e070933
-
SHA512
9462116227ca4c09d74edabd48fafd91522b724c214e59739327f2ed72212d0cd61a251b0e542b0366c55903376f4f265479a9e0b1ba860deaf084bf06252f32
-
SSDEEP
49152:JULIDTRnUCbgKdwGkDHbVx0PlhgAobEpzy9XDZfyXr7wC2oz5XKTAgdxlgYB33aX:J2IfFpz+GkDHTIlhAGz4xyXr8CTITXlW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf34649a37446fac7a7f27549a9f4b27_JaffaCakes118
Files
-
bf34649a37446fac7a7f27549a9f4b27_JaffaCakes118.exe windows:5 windows x86 arch:x86
4a86caa427cbb577336ad9f44f47bf01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
InternetReadFile
avicap32
capCreateCaptureWindowW
shfolder
SHGetFolderPathW
version
GetFileVersionInfoSizeA
rpcrt4
UuidCreate
imagehlp
MapFileAndCheckSumW
secur32
GetUserNameExW
gdi32
GetMetaFileBitsEx
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
shell32
ShellExecuteExW
comctl32
ImageList_GetIconSize
shlwapi
PathRemoveExtensionW
ole32
StgCreateDocfile
oleaut32
VariantClear
oledlg
OleUIBusyW
imm32
ImmGetContext
ws2_32
WSAGetLastError
winmm
timeGetTime
setupapi
SetupDiCreateDeviceInfoList
iphlpapi
GetAdaptersInfo
Sections
.text Size: 2.7MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE