Static task
static1
Behavioral task
behavioral1
Sample
bb681cfd66e9dc91930f20e41939b53b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb681cfd66e9dc91930f20e41939b53b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bb681cfd66e9dc91930f20e41939b53b_JaffaCakes118
-
Size
115KB
-
MD5
bb681cfd66e9dc91930f20e41939b53b
-
SHA1
593d91d23f4f06addec647a8c6ac074b1ccc0fad
-
SHA256
595e4e0b7303de12d579d6c6491dd73f0de4d16d1ea912ca88e6c9b3b47e26ae
-
SHA512
4f4681a80830aa8bddc30c70c377e4476e59bfe9b3939ffd211ad5ac569ff4fb060fd07c2d98f7a801abba65117d7a4665f6e08432e254e100b6c7cf2799e2f0
-
SSDEEP
3072:a5Y0Prv1m7OXFz8g5F7zKw97iGUkClPTxsq6e:ov11Vz8g5797KkmxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb681cfd66e9dc91930f20e41939b53b_JaffaCakes118
Files
-
bb681cfd66e9dc91930f20e41939b53b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9fb6e6d11f5477439ec16989f5b2cd47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadFile
GetModuleHandleA
GetStartupInfoA
WriteConsoleW
lstrcpyA
GetFileTime
FindResourceA
WriteConsoleW
GetFileSize
GetCurrentDirectoryW
HeapCreate
IsValidLocale
WriteConsoleW
SetFileAttributesA
CloseHandle
FormatMessageA
ReleaseMutex
IsBadStringPtrW
CreateMutexA
GetLastError
lstrcpyW
msi
MsiAdvertiseProductA
MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
user32
IsZoomed
GetWindowTextA
PostMessageW
DispatchMessageA
IsCharLowerA
SetCursorPos
SetFocus
GetWindowLongW
IsWindow
wsprintfW
IsDialogMessageA
PeekMessageW
LoadCursorW
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE