Static task
static1
Behavioral task
behavioral1
Sample
bd46293e1dc0d63da88c3a151662e7ee_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd46293e1dc0d63da88c3a151662e7ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd46293e1dc0d63da88c3a151662e7ee_JaffaCakes118
-
Size
567KB
-
MD5
bd46293e1dc0d63da88c3a151662e7ee
-
SHA1
d24e2579d51f72395c63f1b58cc803908fd47b7a
-
SHA256
ce5353d555db90731fa88b241f0cbca3af458243955de96c631b774280250e88
-
SHA512
af562c720a679ac249aa035bf6bd92bf5633c354481f2f12ff3229e0aa4b157a259514fbfbe31deb98d719412f27b04b55fa2cd5377832a9feb1f5c426d765d2
-
SSDEEP
12288:0PfUbGcThaP29kDD6iLf1QZ6A3wsPT1VqnBgGX7Ux8L4k7VWvM2q7f:0Pf9cThaekv6ixQZYk1gnBgGXvL4aVgK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd46293e1dc0d63da88c3a151662e7ee_JaffaCakes118
Files
-
bd46293e1dc0d63da88c3a151662e7ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a1a330f73d578890a2f489a43c8aa91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lwrite
_lcreat
_llseek
_lclose
_lopen
GetSystemDefaultLangID
DeleteFileA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
_lread
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetTempPathA
SetCurrentDirectoryA
lstrcpyA
CreateDirectoryA
GetDiskFreeSpaceA
lstrcatA
WritePrivateProfileStringA
CreateProcessA
CloseHandle
GetModuleFileNameA
lstrlenA
GetPrivateProfileStringA
lstrcmpA
WriteFile
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
GetStringTypeW
user32
SendMessageA
DefWindowProcA
MessageBoxA
wsprintfA
MsgWaitForMultipleObjects
PeekMessageA
BeginPaint
DrawTextA
EndPaint
DestroyWindow
PostQuitMessage
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
GetWindowRect
CreateWindowExA
GetClientRect
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
RegisterClassA
gdi32
GetDeviceCaps
SelectObject
SetBkMode
CreateFontA
comctl32
ord17
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ