Static task
static1
Behavioral task
behavioral1
Sample
bd9917cd9205e73087e99f9df2efdca9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd9917cd9205e73087e99f9df2efdca9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd9917cd9205e73087e99f9df2efdca9_JaffaCakes118
-
Size
32KB
-
MD5
bd9917cd9205e73087e99f9df2efdca9
-
SHA1
9c754dea36dfb956df22eff5a5c7aba27641f331
-
SHA256
3bd32ca7213baad9621e93b488724d637bab1d5e88f0dd2f6aed8157d96ddce0
-
SHA512
de97011a8068f8645795cf4354019bad17a0422aac92c129a46966fd8877599f6668bd23e637d6d581494db9273c84145673439ff0f4b2bbcf2c4ee748ce4f6e
-
SSDEEP
768:PlKs3vkCIC7Dg7CQKlY5dn1vILiYNgShwhK8M2:PdtFQKUImpVhd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd9917cd9205e73087e99f9df2efdca9_JaffaCakes118
Files
-
bd9917cd9205e73087e99f9df2efdca9_JaffaCakes118.exe windows:4 windows x86 arch:x86
b15f0ac66995a8bf24589554dab63171
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
FreeLibrary
LoadLibraryA
OpenEventA
GetFileAttributesA
GetTempPathA
GetLastError
WriteFile
CreateFileA
FileTimeToSystemTime
GetModuleFileNameA
lstrcatA
WaitForSingleObject
DeleteFileA
ExitThread
TerminateThread
GetTickCount
GetModuleHandleA
GetModuleHandleW
WaitForMultipleObjects
lstrcmpA
CreateToolhelp32Snapshot
Process32First
CompareStringA
lstrcpyA
FindResourceA
LoadResource
CloseHandle
GetProcessHeap
SetEvent
PulseEvent
Sleep
GetProcAddress
ResetEvent
lstrlenA
MultiByteToWideChar
CreateThread
CreateEventA
OpenProcess
TerminateProcess
ExitProcess
ReadFile
HeapFree
HeapAlloc
RtlUnwind
user32
SetWindowTextA
GetParent
ShowWindow
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
RegisterClassA
CreateWindowExW
DefWindowProcA
PostQuitMessage
CreateWindowExA
CharToOemA
DestroyWindow
MessageBoxA
LoadIconA
FindWindowA
wsprintfW
wsprintfA
advapi32
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExW
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue
shell32
ShellExecuteA
SHGetFolderPathA
Shell_NotifyIconA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysAllocString
SysFreeString
wininet
InternetGetConnectedState
HttpQueryInfoA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ