Static task
static1
Behavioral task
behavioral1
Sample
bf61326188d295c5fa59864cb7646555_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bf61326188d295c5fa59864cb7646555_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf61326188d295c5fa59864cb7646555_JaffaCakes118
-
Size
188KB
-
MD5
bf61326188d295c5fa59864cb7646555
-
SHA1
5cd6204cc93c98e26c4adb08fa32f67c85173f10
-
SHA256
64931ad4c8728252f4530b25496e2f07b7720851c096af75b1f8414fb706e334
-
SHA512
36589a1b1873790e6555524d765f01e9ea4891ef741f6a73bc95a056830e08131852da02baa5b1ec1be8028ca21fcfa10e3d2e7f839c2fcfcf254dc4fcaf68ba
-
SSDEEP
3072:t+6KrZZMO+wCv+4f96Rce+hAGWUphCecio6X+SItoO8tj8arrUlMFs2DJRbo83Lb:tIMDw+5ar+hhWAcvuF3OOrrUlhQXbh3o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf61326188d295c5fa59864cb7646555_JaffaCakes118
Files
-
bf61326188d295c5fa59864cb7646555_JaffaCakes118.exe windows:6 windows x86 arch:x86
bdfee17fd0ffe74fd1fdd78acced0d2c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
GetAce
msvcrt
atoi
ws2_32
WSACleanup
rpcrt4
RpcBindingFree
user32
LoadStringW
netapi32
DsGetDcNameA
ntdll
NtClose
wldap32
ord147
dnsapi
DnsFree
ntdsapi
DsBindA
shlwapi
SHDeleteKeyW
iphlpapi
GetAdaptersAddresses
version
VerQueryValueW
mprapi
MprInfoBlockSet
Sections
.MPRESS1 Size: 181KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE