Static task
static1
Behavioral task
behavioral1
Sample
bc21c4e261acfaec499d7d9334623c76_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc21c4e261acfaec499d7d9334623c76_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc21c4e261acfaec499d7d9334623c76_JaffaCakes118
-
Size
74KB
-
MD5
bc21c4e261acfaec499d7d9334623c76
-
SHA1
2ccf956083c9a8657cd19dd908e832c6e0d7f0a9
-
SHA256
413405ecdad5048b393b2c86b370dcc4073d37e634f794f9ea31ceddc9764257
-
SHA512
31623c2702a01e65daaaced3d2685e6b848f8eb5bc1307dbb717d724ac910fb7433d0dc788750f2867b1733bf0cb2ed934ddce7e47478ef4a969e58b7843376d
-
SSDEEP
1536:W2ngMlOLcICHS3S9EpskNqhmdQyxG58TWURYpIiyrDhF1zWs/pWhp:W2nFI5ckZ1xC88Ib2r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc21c4e261acfaec499d7d9334623c76_JaffaCakes118
Files
-
bc21c4e261acfaec499d7d9334623c76_JaffaCakes118.exe windows:4 windows x86 arch:x86
6668ef00240c7c356863668000d1ee32
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
WriteFile
lstrcpyA
lstrcatA
GetModuleHandleA
FindResourceA
GetTempPathA
CreateFileA
DeleteFileA
CopyFileA
MoveFileExA
LockResource
GetProcAddress
VirtualAlloc
GetCurrentProcess
LoadResource
SizeofResource
CloseHandle
user32
MessageBoxA
comdlg32
GetOpenFileNameA
shell32
FindExecutableA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ