Static task
static1
Behavioral task
behavioral1
Sample
bc1c887a3aacfb3752fdec169be81e7f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc1c887a3aacfb3752fdec169be81e7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc1c887a3aacfb3752fdec169be81e7f_JaffaCakes118
-
Size
43KB
-
MD5
bc1c887a3aacfb3752fdec169be81e7f
-
SHA1
2ccfc76e99604878c379d36e265b50f92af750a7
-
SHA256
f88f3b5d418b392c542248453a5f578b46127a7d9b34eb0510969152177384a0
-
SHA512
6e9f8b92b05deec9cd93c3959dd9b828d92a9bc86bb2a2c1b5cb4919c935bd1b6e03c4caac7b66335a45c33a4e0435eb2face3f96aefba17b7ad9332833eefb0
-
SSDEEP
768:96m4s6PLT7Sytk1KN8xw/yYvrwWFOuxbFYqzCUViRcyEWpjb:96dT7SGk1KFaWhzCmitEWpv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc1c887a3aacfb3752fdec169be81e7f_JaffaCakes118
Files
-
bc1c887a3aacfb3752fdec169be81e7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2dd1000afc5c35df9021ccf2d340b6eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
swprintf
memmove
_purecall
wcscpy
_onexit
_c_exit
wcsncpy
_wcsnicmp
_ftol
_except_handler3
version
GetFileVersionInfoW
GetFileVersionInfoA
GetFileVersionInfoSizeA
advapi32
RegOpenKeyExA
RegDeleteKeyW
RegSetValueExW
RegEnumValueW
RegCloseKey
RegOpenKeyW
RegSetValueExA
RegDeleteValueW
SetSecurityDescriptorDacl
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
gdi32
GetObjectA
CreateRectRgn
SetMetaRgn
GetClipBox
GetPaletteEntries
CreateFontIndirectW
kernel32
HeapAlloc
GetVersion
GetCurrentThread
GetModuleFileNameA
QueryPerformanceCounter
CreateEventW
GetModuleHandleA
VirtualAlloc
VirtualFree
GetCommandLineA
ExitProcess
GetCurrentProcess
InterlockedExchange
GetCurrentProcessId
GetProcAddress
InitializeCriticalSection
UnhandledExceptionFilter
SetLastError
LoadLibraryW
lstrlenW
GetProcessHeap
InterlockedCompareExchange
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ