Static task
static1
Behavioral task
behavioral1
Sample
826e65c945738cbd64f89eae4406687f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
826e65c945738cbd64f89eae4406687f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
826e65c945738cbd64f89eae4406687f_JaffaCakes118
-
Size
952KB
-
MD5
826e65c945738cbd64f89eae4406687f
-
SHA1
97901e6642a838debf8abf7f7eea3ff16e8534cc
-
SHA256
78aa909c39f609ca8f50cecd6aa9c012fceb747ab5ae0d0760d74a472f54f615
-
SHA512
dffa43e0494e5d2c5190752ff1d8a89d34815ab44c15a0f748d38fe09a62e4c31fe899dc9d71c2b18b87c9a953b59ae5ab59d1f8bcaf5d05abd4d62eb905296c
-
SSDEEP
12288:M0HtYu6L29KUidyHTbfhZY1gU1RsubgnvbhaCQKnBjP8PVyc5NZ3lNALvxLCEmz9:ZtL9NEe1ZY1gyh8hz4xNZ1NAbAEcTzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 826e65c945738cbd64f89eae4406687f_JaffaCakes118
Files
-
826e65c945738cbd64f89eae4406687f_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a0dbd064466451319c608490c8a9ebb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
bind
setupapi
SetupDiGetDeviceInterfaceDetailW
bthprops.cpl
BluetoothAuthenticateDevice
kernel32
HeapCreate
user32
PostMessageW
advapi32
RegCreateKeyExW
shell32
SHGetFolderPathW
ole32
CoUninitialize
oleaut32
SafeArrayGetUBound
shlwapi
PathAppendW
Sections
.text Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 196KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ