Static task
static1
Behavioral task
behavioral1
Sample
bc220d2bf717ef2770a8eb626066710c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc220d2bf717ef2770a8eb626066710c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc220d2bf717ef2770a8eb626066710c_JaffaCakes118
-
Size
46KB
-
MD5
bc220d2bf717ef2770a8eb626066710c
-
SHA1
5a4cfc51c00fda32de89824ca44444fb288e5c05
-
SHA256
7097bc71cb4063ceb17b2ba927399aae7ceddc1a5df19875d34e05baf5868105
-
SHA512
7133cd5935db17a8b6172f63f917b03446492a27e256ebb490daff3865f3ccae209388969201b7f3914aebf4c12c7b83d97df0d8ce5998d02730a879737eb16a
-
SSDEEP
768:1i4dXHewmraowusc/PvkkfabO5YhzejvFwDq2DQjeykL26C4QM3iJcmPT:1fdXHepWoVsc/35fzYhzCvo90jeew8PT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc220d2bf717ef2770a8eb626066710c_JaffaCakes118
Files
-
bc220d2bf717ef2770a8eb626066710c_JaffaCakes118.exe windows:4 windows x86 arch:x86
42488ede3c8195e658310438f9ad184e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
MessageBoxA
DialogBoxParamA
LoadIconA
ArrangeIconicWindows
CharUpperA
IsIconic
CharNextA
DestroyIcon
FlashWindow
GetSystemMetrics
RegisterWindowMessageA
LoadCursorA
CreateWindowExA
EnableWindow
SetCursorPos
CharLowerA
KillTimer
GetSysColorBrush
SetTimer
ShowCursor
SetWindowTextA
GetMenuItemCount
GetDesktopWindow
ReleaseDC
GetParent
kernel32
GetProcAddress
LoadLibraryA
SetLastError
lstrcatA
GlobalDeleteAtom
FreeLibrary
GlobalFindAtomA
Sleep
GetLastError
GlobalAddAtomA
CopyFileA
AllocConsole
FindResourceA
GetConsoleOutputCP
GetCommandLineA
lstrlenA
shell32
DragFinish
ShellAboutA
gdi32
SetTextColor
GetObjectA
SelectObject
DeleteDC
DeleteObject
SetBkColor
EndPage
CreateSolidBrush
CreateCompatibleDC
SetBkMode
ole32
CoGetCurrentProcess
CoFreeUnusedLibraries
CoFreeAllLibraries
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ