Static task
static1
Behavioral task
behavioral1
Sample
ba114ac4afa5505db7fd2b70ac5bfc3d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ba114ac4afa5505db7fd2b70ac5bfc3d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba114ac4afa5505db7fd2b70ac5bfc3d_JaffaCakes118
-
Size
128KB
-
MD5
ba114ac4afa5505db7fd2b70ac5bfc3d
-
SHA1
8f3ac4bf7e8b40d9ceadab550f5125d076e69c43
-
SHA256
539ef5dde4d574f1c222811eeb1a00a4744369a3af85c048288c0d1433ac931e
-
SHA512
74d130aa514667b53d401ebe5a1881e36fc65739bc78f32ddac980436f90c9bd7f1969f6a7dd92cd0001f9b37dff65ac718c015aa3988c4e8383898968350239
-
SSDEEP
1536:bzGkvz0Or+LWd3MpjP/6l0eTvSXvPCJc4R5DA6XUxIp9PfxvzQM3SvDO84X6U:bSCGLeA32jL31D3Ozd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba114ac4afa5505db7fd2b70ac5bfc3d_JaffaCakes118
Files
-
ba114ac4afa5505db7fd2b70ac5bfc3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
434f4dc009c784840f9ee9f315ffb8c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
ExitProcess
GetFullPathNameA
GetConsoleCP
GetDefaultCommConfigA
GetExitCodeProcess
GetVolumePathNameA
ExpungeConsoleCommandHistoryA
GetCommandLineW
GetPrivateProfileStructA
CreateSemaphoreA
VirtualAlloc
GetModuleFileNameA
GetProcessWorkingSetSize
GetCommandLineA
GetLocaleInfoA
GetShortPathNameA
GetProcessPriorityBoost
user32
LoadRemoteFonts
AlignRects
LoadRemoteFonts
DestroyWindow
GetWindowThreadProcessId
BroadcastSystemMessageA
GetCaretBlinkTime
GetKBCodePage
OffsetRect
DialogBoxParamA
PrintWindow
AlignRects
GetMenuCheckMarkDimensions
IsGUIThread
DrawStateA
ChangeMenuA
ntdll
RtlGetLastWin32Error
tapi32
lineDrop
lineCreateAgentSessionW
lineConfigDialogEdit
Sections
.textbbs Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 116KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ