Static task
static1
Behavioral task
behavioral1
Sample
bd86adb0e10d36a9bfb614e6726e12c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd86adb0e10d36a9bfb614e6726e12c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd86adb0e10d36a9bfb614e6726e12c7_JaffaCakes118
-
Size
208KB
-
MD5
bd86adb0e10d36a9bfb614e6726e12c7
-
SHA1
1c36eecc97089ed391b609d21b99f6ac31c3d8bb
-
SHA256
858f70ed3353541c36a9d3c9cceb8b8707909ff5a72c96dbfd11f1159467ddef
-
SHA512
56d93993e87fa1876d741cda8f70a3ee7fbe6624c6b9c3fb6704715b53a8cdc85f2295d04169c8b03cd45c1fd0a14de70189127d16b4745da3e85657ede1627b
-
SSDEEP
6144:g2E6MATnEyIymhvExWSts17I2IHlRtYXMiy3+liqd4:uATE0tWSts17LIx3Aiqd4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd86adb0e10d36a9bfb614e6726e12c7_JaffaCakes118
Files
-
bd86adb0e10d36a9bfb614e6726e12c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
221cac323e4818bf3b8a752c5fe23d0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringW
FileTimeToDosDateTime
FormatMessageA
GetConsoleOutputCP
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileType
GetPrivateProfileStringA
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTempPathA
GlobalDeleteAtom
GlobalHandle
HeapSize
IsValidCodePage
LocalAlloc
MultiByteToWideChar
ReleaseMutex
SetCurrentDirectoryA
SetFileTime
TlsFree
VirtualAlloc
shell32
DragQueryFile
DragQueryFileW
FindExecutableW
SHBrowseForFolderA
SHCreateDirectoryExA
SHFileOperationW
SHGetDiskFreeSpaceExW
SHGetFolderPathA
SHGetPathFromIDListW
SHGetSettings
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteExW
Shell_NotifyIconA
Shell_NotifyIconW
gdi32
CreateCompatibleDC
CreateFontIndirectA
CreateFontW
CreateRoundRectRgn
GetCurrentPositionEx
GetPaletteEntries
GetStockObject
Polyline
RoundRect
SelectClipRgn
SetColorAdjustment
SetDIBitsToDevice
UnrealizeObject
user32
CreateMenu
CreatePopupMenu
DispatchMessageA
DrawIconEx
EnableMenuItem
EnumWindows
EqualRect
FillRect
GetActiveWindow
GetDlgItem
GetMenuStringA
GetScrollRange
GetSysColorBrush
GetWindowDC
InsertMenuItemA
IsRectEmpty
IsZoomed
KillTimer
OpenClipboard
RedrawWindow
RemovePropA
ScrollWindow
SendDlgItemMessageA
SetClassLongA
SetScrollRange
SetWindowsHookExA
TrackPopupMenu
comctl32
CreatePropertySheetPageW
CreateStatusWindowA
CreateToolbarEx
DestroyPropertySheetPage
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Create
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_GetBkColor
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_SetOverlayImage
InitCommonControls
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BikPYqhF Size: 512B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE