Static task
static1
Behavioral task
behavioral1
Sample
bd60f79b2d8a74f8df0f207e0ae4ae0f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd60f79b2d8a74f8df0f207e0ae4ae0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd60f79b2d8a74f8df0f207e0ae4ae0f_JaffaCakes118
-
Size
99KB
-
MD5
bd60f79b2d8a74f8df0f207e0ae4ae0f
-
SHA1
21c38af8ed621193e4198e22bab42defa8ef38a1
-
SHA256
9c2196aa62209455c31cf1406003fee5d8b5c53ac300602ed30f19199a3ef51b
-
SHA512
c33aa93009392db3e56b8bf9a015b5032b54c66d1bb1bbed6050315ec614ca161b01e3b25f4ee0ca5a7ef1d6a6a3c642b164bdcd2e42fef17fcac1429000fba7
-
SSDEEP
1536:Hk5LOU0T3xcGRj5ZPSYaO9nyGuHHnBXHHHbTeqx1L4+MDm9zoX:HWMuuS1cwnhnbTe+Ld9zo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd60f79b2d8a74f8df0f207e0ae4ae0f_JaffaCakes118
Files
-
bd60f79b2d8a74f8df0f207e0ae4ae0f_JaffaCakes118.exe windows:5 windows x86 arch:x86
43dec904377d4ced7b6f9dc43feb0c58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetSystemTimeAsFileTime
WriteFile
ReadFile
CloseHandle
GetFileSize
LockResource
TlsAlloc
VirtualProtect
FindResourceA
VirtualAlloc
LoadResource
GetProcAddress
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
GetVersionExA
GetTickCount
GetCurrentProcessId
HeapAlloc
IsValidCodePage
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
user32
UpdateWindow
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadStringA
DialogBoxParamA
DefWindowProcA
BeginPaint
EndPaint
wsprintfA
LoadIconA
GetClientRect
GetSysColorBrush
CreateWindowExA
ShowWindow
gdi32
Rectangle
advapi32
RegCloseKey
ole32
CoInitialize
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ