Static task
static1
Behavioral task
behavioral1
Sample
bd4a6c84569e1c56d9ff58e6254a1527_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd4a6c84569e1c56d9ff58e6254a1527_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd4a6c84569e1c56d9ff58e6254a1527_JaffaCakes118
-
Size
532KB
-
MD5
bd4a6c84569e1c56d9ff58e6254a1527
-
SHA1
2a57bd30493157c5909418ef9dff51ee5b160572
-
SHA256
92330c89f989a43432c286c01fe62ca521e695bf0cc23491e5f17e5c5d5336eb
-
SHA512
d8ed8e319acfa76f8195bb4a652f04f90a7268f7489139bce81485b895818888c405e5b4799afd9a04443ff12d3d0b53969f9400b2e2d79c60ce6e6558b026bc
-
SSDEEP
12288:FfB/iolNg4w+q4vr5EUyn4zyFx4SeAc/XIcPaGp9srRoNJW3:dYeNq4vr5In4kU/IBGfsr+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd4a6c84569e1c56d9ff58e6254a1527_JaffaCakes118
Files
-
bd4a6c84569e1c56d9ff58e6254a1527_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d245e09ff918cda199c95ddc392c4bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
TranslateMessage
PostQuitMessage
SetWindowPos
GetSystemMetrics
IsWindow
GetWindowRect
RegisterClassA
PeekMessageA
GetDC
SetWindowTextA
CheckMenuItem
LoadStringA
GetDlgItem
FillRect
GetFocus
EnableWindow
SetForegroundWindow
DestroyWindow
kernel32
GetThreadLocale
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetCPInfo
InterlockedIncrement
WriteFile
LeaveCriticalSection
LocalAlloc
VirtualAlloc
GetCurrentThreadId
HeapAlloc
InterlockedDecrement
GlobalAlloc
InitializeCriticalSection
CreateEventW
LocalFree
GetOEMCP
SetEnvironmentVariableA
GetStringTypeW
HeapReAlloc
GetACP
CloseHandle
SetUnhandledExceptionFilter
ReadFile
GetModuleHandleA
GetStringTypeA
CreateThread
GetProcessHeap
InterlockedCompareExchange
GetProcAddress
FreeEnvironmentStringsW
WideCharToMultiByte
LCMapStringW
GetCurrentProcessId
GetCurrentProcess
FreeEnvironmentStringsA
lstrlenW
VirtualProtect
GetTickCount
HeapDestroy
SetEvent
WaitForSingleObject
GetConsoleOutputCP
EnterCriticalSection
GetLastError
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 492KB - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ