Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5bad00590a2986a576d6fa47fe7c8951.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5bad00590a2986a576d6fa47fe7c8951.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_5bad00590a2986a576d6fa47fe7c8951
-
Size
777KB
-
MD5
5bad00590a2986a576d6fa47fe7c8951
-
SHA1
b19978f61206fce13887a46eff565c32c3d93681
-
SHA256
6a7c816b7dbcc0307915f3345bc00e3ba0a70dad7a5f2fea59bf0a685aa5f8f6
-
SHA512
4b47be04d06958f5c7b4f3486dc32002ad39f8620d5aa626b3e58f4bec5df9f49d925048ce591833e18ae36f397fe61b54af6651cc50d75e38a77253a751123b
-
SSDEEP
24576:BAxFc9euQ+pscajhLvElo2McbhjrbWI62FGy4+:GxFck5hgl/bhjrbW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5bad00590a2986a576d6fa47fe7c8951
Files
-
JaffaCakes118_5bad00590a2986a576d6fa47fe7c8951.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bapaqfpu Size: 698KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qbaenlnv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE