Static task
static1
Behavioral task
behavioral1
Sample
bd55d641e951920a184b6dea8dfcef1e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd55d641e951920a184b6dea8dfcef1e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd55d641e951920a184b6dea8dfcef1e_JaffaCakes118
-
Size
203KB
-
MD5
bd55d641e951920a184b6dea8dfcef1e
-
SHA1
8c13e6ddd347e7546314d76fca034fe989861ba7
-
SHA256
a36f3aa37df77c7daaa063db589faa2e23ff554626d43e3b88ab4b43a4822f1b
-
SHA512
5607cde71810e3e23f022b0a76c8d5dd8692695f111a5b043dd6557d1dacad9dab6badf5c11fc11951337a56b31d9a2e2621134efc02fcbddbb7de3e5b184bbe
-
SSDEEP
3072:gos4loRoMJG9ccl3/kyXDS+1u7Mh+A6NVd74T5wi+9GHe/+KdmUoBJFkcoN9:goxCml9HRzM7QBY2wi+9GA7MDBJFkc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd55d641e951920a184b6dea8dfcef1e_JaffaCakes118
Files
-
bd55d641e951920a184b6dea8dfcef1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
0078910ffb1a5af130aa95ee95c48c47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegCloseKey
RegSetValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyExW
user32
RegisterClassExW
RegisterDeviceNotificationW
KillTimer
CreateWindowExW
SetTimer
UnregisterDeviceNotification
LoadCursorW
SendMessageW
IsWindow
DestroyWindow
DefWindowProcW
wsprintfW
shlwapi
PathAddBackslashW
PathFindExtensionW
PathRemoveExtensionW
PathGetDriveNumberW
PathFileExistsW
PathFindFileNameW
ole32
CoGetProcessIdentifier
StringFromGUID2
CoTaskMemFree
CoInitialize
GetRunningObjectTable
CoFreeUnusedLibraries
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CreateItemMoniker
kernel32
GlobalFree
GetCalendarInfoW
InterlockedCompareExchange
GetSystemDirectoryA
WideCharToMultiByte
WaitForSingleObject
GetCurrentProcess
SetCurrentDirectoryA
GetEnvironmentVariableW
GetProfileStringW
GetModuleFileNameA
TlsFree
TerminateProcess
CreateSemaphoreA
QueryPerformanceCounter
DeleteFileW
ReleaseMutex
GetFileSize
UnhandledExceptionFilter
CreateMutexA
GetCurrentDirectoryA
EnumResourceNamesA
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcmpW
TlsSetValue
GetCurrentThreadId
MultiByteToWideChar
ReadFile
InitializeCriticalSection
GlobalAlloc
lstrlenW
GlobalLock
GetTempPathW
GlobalSize
IsDebuggerPresent
ReleaseSemaphore
SetUnhandledExceptionFilter
GetProcAddress
GetWindowsDirectoryA
TlsGetValue
GetLocalTime
GlobalUnlock
RaiseException
wmvcore
WMCreateProfileManager
ddraw
DirectDrawCreateEx
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ