Static task
static1
Behavioral task
behavioral1
Sample
bb5abc58ddf677ed2b3a9906ba5fedf4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb5abc58ddf677ed2b3a9906ba5fedf4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb5abc58ddf677ed2b3a9906ba5fedf4_JaffaCakes118
-
Size
242KB
-
MD5
bb5abc58ddf677ed2b3a9906ba5fedf4
-
SHA1
1067be395434e100ad297610f3fab5fafb33d53b
-
SHA256
1fdef3ba31596d2a767e96e04934ffcceafc7807f4e317fac9039538e9a7b1c0
-
SHA512
059de1f0781f74f170dc80f9cda0c05a50ef67b2d2319e8f2a6a31992521f84553f980ebe77138c7e12be069d0ee6626e2c3514975c67b52abc39f312c4515a5
-
SSDEEP
6144:9K4k6rbpQY/hjfQ4NciDyRqXkjlAHQuj3XkEEjl:9RNpQWh5WwQlAw6Xk5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb5abc58ddf677ed2b3a9906ba5fedf4_JaffaCakes118
Files
-
bb5abc58ddf677ed2b3a9906ba5fedf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
4dfb6ee33302cc376d87f560712b3adb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
kernel32
Beep
CreateDirectoryA
CreateDirectoryW
CreatePipe
DosDateTimeToFileTime
DuplicateHandle
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
GetACP
GetCPInfo
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcessHeap
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDirectoryA
GetSystemInfo
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumeInformationA
GetVolumeInformationW
GlobalAlloc
InitializeCriticalSection
IsBadReadPtr
IsDebuggerPresent
IsValidLocale
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
MoveFileA
MoveFileW
MultiByteToWideChar
RaiseException
RemoveDirectoryA
RemoveDirectoryW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetErrorMode
Sleep
SystemTimeToFileTime
TlsAlloc
WaitForMultipleObjects
WaitForSingleObject
lstrcmpiA
GetProcAddress
user32
CharLowerW
CharUpperW
GetKeyboardType
MessageBoxA
wsprintfA
wsprintfW
DefWindowProcA
LoadCursorW
DialogBoxParamW
InvalidateRect
InsertMenuA
ActivateKeyboardLayout
GetCapture
GetClassInfoExW
CreateAcceleratorTableA
GetKeyboardLayout
SetWindowRgn
DestroyIcon
GetClassInfoA
FindWindowW
DialogBoxIndirectParamW
GetMenuStringA
GetSysColorBrush
EndDialog
TrackPopupMenu
wvsprintfA
WinHelpW
LoadImageW
SetWindowPos
IsWindow
WaitMessage
CharLowerA
MessageBoxW
SetTimer
LoadMenuW
GetForegroundWindow
PostQuitMessage
OffsetRect
GetMenuInfo
LoadIconA
SetParent
EmptyClipboard
ShowCaret
cfgmgr32
CM_Free_Log_Conf
CM_Next_Range
gdi32
CreatePen
GdiGetBatchLimit
GetMetaFileW
RemoveFontResourceA
CreateFontIndirectA
GetTextExtentPointW
CreateCompatibleDC
StretchDIBits
CreateRoundRectRgn
GetEnhMetaFilePixelFormat
SelectBrushLocal
GetEnhMetaFileW
Sections
.icode Size: 1024B - Virtual size: 1021B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gmGSuS Size: 103KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iFOKca Size: 109KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ