Static task
static1
Behavioral task
behavioral1
Sample
bbba8d008258c0f0a2f107bad27a066b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bbba8d008258c0f0a2f107bad27a066b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbba8d008258c0f0a2f107bad27a066b_JaffaCakes118
-
Size
52KB
-
MD5
bbba8d008258c0f0a2f107bad27a066b
-
SHA1
1819f62229b79f39053d1a9aeda86777c15e3747
-
SHA256
c21fc4c0ae80214a720b2487f14caf88571a067b38e4389550b5fa9e6771fdab
-
SHA512
a57e89f38da7235800094e421aa0fd3b9c88a0631ce268c0f25c58eb08e2ba301978eb2a7783489158e379c26604678e8823df429ff809cfc647dc7c70d90c86
-
SSDEEP
768:dHQ5CW8ZZ1pRE03m95ngwuuo2ObmEC3DSq3:dQ5wz3m95cuovb/OS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbba8d008258c0f0a2f107bad27a066b_JaffaCakes118
Files
-
bbba8d008258c0f0a2f107bad27a066b_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ece0e40b74c255019335ff86ba0001d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
Sleep
GetModuleFileNameA
WaitForSingleObject
CreateMutexA
DeleteFileA
SetFileAttributesA
SystemTimeToFileTime
GetCurrentProcess
SetErrorMode
GetVersionExA
MoveFileA
CreateProcessA
LoadLibraryA
GetProcAddress
ReleaseMutex
GetLocalTime
FreeLibrary
GetLastError
GetStringTypeA
LCMapStringW
ReadFile
SetStdHandle
SetFilePointer
GetOEMCP
GetACP
ExitProcess
TerminateProcess
CloseHandle
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
GetCPInfo
HeapCreate
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
WriteFile
VirtualFree
HeapFree
RtlUnwind
VirtualAlloc
HeapReAlloc
FlushFileBuffers
user32
wsprintfA
SendMessageA
FindWindowA
LoadStringA
MessageBoxA
ExitWindowsEx
advapi32
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE