Static task
static1
Behavioral task
behavioral1
Sample
bc2d6e269ce38cbad666ed707c4c2de6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc2d6e269ce38cbad666ed707c4c2de6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc2d6e269ce38cbad666ed707c4c2de6_JaffaCakes118
-
Size
68KB
-
MD5
bc2d6e269ce38cbad666ed707c4c2de6
-
SHA1
f4decb0671201064b4cb9d99b5334402f2aa632a
-
SHA256
03374219720886d91adb1adbdebe2586dd9c19b3d2a937b752059aadcb4dd6a9
-
SHA512
0ab65d0f4bb99466ec151e04d24ff08afba86a24a66f9c27feaca011062aaa8c0bcdbfdbfc3606a37c294a904b117d47dcac3cb6df0f00d145b8762fd9373c17
-
SSDEEP
768:m4PKTI+PJ/jFRMRp77OnGZNf0fEFNHH/T+XFZNDF+GS1FKl5sveU:mhHLcMkT/T+XFZNJ+N1FQ5s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc2d6e269ce38cbad666ed707c4c2de6_JaffaCakes118
Files
-
bc2d6e269ce38cbad666ed707c4c2de6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f6c584ff660f54e51e62a2227aad4725
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
shlwapi
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
SHGetValueA
user32
EnumWindows
PostMessageA
FindWindowA
GetWindowThreadProcessId
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
strchr
strncpy
strncmp
strtok
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
isspace
__CxxFrameHandler
memset
strrchr
_stricmp
mfc42
ord2818
ord5710
ord5683
ord4278
ord3790
ord353
ord3176
ord1979
ord858
ord939
ord356
ord540
ord800
ord535
ord940
ord537
ord860
ord668
ord665
ord1980
ord2393
ord5583
ord3181
ord354
ord2781
ord2770
ord4058
kernel32
GetStartupInfoA
GetModuleHandleA
lstrcpyA
lstrcatA
DeleteFileA
CreateMutexA
GetLastError
Sleep
GetWindowsDirectoryA
SetErrorMode
LoadLibraryExA
RemoveDirectoryA
HeapAlloc
SetLastError
HeapFree
WideCharToMultiByte
OpenProcess
WaitForSingleObject
TerminateProcess
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
advapi32
RegOpenKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE