Static task
static1
Behavioral task
behavioral1
Sample
bd64d96823a1bada074e0bf96b8dec07_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd64d96823a1bada074e0bf96b8dec07_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd64d96823a1bada074e0bf96b8dec07_JaffaCakes118
-
Size
21KB
-
MD5
bd64d96823a1bada074e0bf96b8dec07
-
SHA1
7d8804a56633fbeeab1d36a539d0f4effaae51e4
-
SHA256
b03bcd2054917e88bcccf35a09d2eea68947baf3f6f17c2218d3d5e85745961a
-
SHA512
21982f2a97cc08e0c9603fab9d45cdf5c780ee23c43e883984b80c081630e16a6bdd49d5a3ec2af935f437110f90e1db8ea95cd0b8a66b73a6f57b07920f9206
-
SSDEEP
384:kTt3W0m4t/N6ykZBB+SBEa7TkkVE4p4MvVx/YCqCIaDLu+rt+nA9:kpW0r6ykZBRB97hVE4p4MvVx/YVotiA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd64d96823a1bada074e0bf96b8dec07_JaffaCakes118
Files
-
bd64d96823a1bada074e0bf96b8dec07_JaffaCakes118.exe windows:23380 windows x86 arch:x86
5507999c84db15bbeecf5b9cfd86f50f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CloseHandle
GetTickCount
InitializeCriticalSection
GetStartupInfoA
WriteFile
CloseHandle
ExitProcess
ReadFile
EnterCriticalSection
LoadLibraryW
lstrcmpiW
GetLastError
InterlockedIncrement
GetTickCount
VirtualAlloc
SetLastError
GetCommandLineW
VirtualAlloc
GetLastError
UnhandledExceptionFilter
GetSystemTimeAsFileTime
Sleep
WriteFile
LocalAlloc
InitializeCriticalSection
GetCurrentThreadId
CreateThread
GetStartupInfoW
Sleep
lstrcpyW
GetVersionExA
GetVersionExA
GetACP
VirtualAlloc
VirtualFree
QueryPerformanceCounter
LoadLibraryW
VirtualAlloc
WaitForSingleObject
LocalAlloc
LoadLibraryA
LeaveCriticalSection
GetLastError
GetLastError
LoadLibraryA
user32
LoadCursorW
IsIconic
BeginPaint
GetFocus
MessageBoxA
GetSysColor
MessageBoxW
GetMessageW
LoadAcceleratorsW
DestroyMenu
MessageBeep
ScreenToClient
EnableWindow
EnableMenuItem
GetDlgItemTextW
ReleaseDC
SendMessageW
SystemParametersInfoW
SetWindowTextW
LoadStringW
LoadStringW
DialogBoxParamW
LoadStringW
FillRect
InvalidateRect
GetSubMenu
CopyRect
GetMenu
EndPaint
SetCursor
SetCapture
PtInRect
SendMessageA
EnableWindow
SetRect
InvalidateRect
GetWindow
EnableMenuItem
DefWindowProcW
PostMessageW
GetFocus
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ