Static task
static1
Behavioral task
behavioral1
Sample
bc30b0a249ab39dfa2957c5f59ed80cc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc30b0a249ab39dfa2957c5f59ed80cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc30b0a249ab39dfa2957c5f59ed80cc_JaffaCakes118
-
Size
109KB
-
MD5
bc30b0a249ab39dfa2957c5f59ed80cc
-
SHA1
adc1affd7bb06e0d9d747d33dcb7e60a6c846566
-
SHA256
13a3893ad743f60e88bdd483ec7fadb93feef0e1f29d3c841be43937c394a8b8
-
SHA512
742e226754b66d3637dec3ad984025959b5a22f42aef6795b787e6646dffd8fe32d83d1aa2d0af28419f65db3835add575b59ff9f52f19d3f380b99af9e5921b
-
SSDEEP
1536:T09DhgmQEawh8HVfrhe/+n9c6jsuSMhxVWg7H3s0+B8H17OPkyesR:uhl4HBrheG9RBx6WOPk+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc30b0a249ab39dfa2957c5f59ed80cc_JaffaCakes118
Files
-
bc30b0a249ab39dfa2957c5f59ed80cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
3e1e195f0356765cbbb7decd8bc26cd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
TranslateMessage
GetSystemMetrics
GetParent
GetDesktopWindow
CharNextA
kernel32
lstrlenA
lstrcmpiA
GetWindowsDirectoryA
GlobalFindAtomA
RemoveDirectoryA
lstrlenW
QueryPerformanceCounter
lstrcmpiW
DeleteFileA
VirtualAlloc
CopyFileA
VirtualFree
lstrcmpA
GetCommandLineA
GetSystemTime
RemoveDirectoryW
FindClose
GetModuleHandleA
gdi32
SelectObject
SetStretchBltMode
DeleteObject
SaveDC
SetMapMode
CreateSolidBrush
SetTextColor
DeleteDC
GetClipBox
CreateCompatibleDC
SetTextAlign
GetDeviceCaps
GetStockObject
RectVisible
GetTextMetricsA
GetPixel
GetObjectA
RestoreDC
CreateFontIndirectA
SelectPalette
LineTo
glu32
gluNurbsCallback
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ycbktny Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE