Static task
static1
Behavioral task
behavioral1
Sample
bc33ccd1151b7ea5eb1a0df31d603e8f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc33ccd1151b7ea5eb1a0df31d603e8f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc33ccd1151b7ea5eb1a0df31d603e8f_JaffaCakes118
-
Size
1.5MB
-
MD5
bc33ccd1151b7ea5eb1a0df31d603e8f
-
SHA1
fab401dbff1962e4ad0be434b5c73de3fe25b9db
-
SHA256
c13250f0b3e575572dd4fc73517508a1bae62df719c51c3a9dea7c457d988631
-
SHA512
4d4770cd916b6b914055033387d20300af57227622d5ec53b1f8d6c0d1b0b52b5c6d94115c082fd7de48874847046ea040a89dbee45dea566a5250891a9868d8
-
SSDEEP
24576:hhDR0UsnF9sTiq840Jig2+aGnQbAvFyGx7zUY67WxD6L1beogejMy6G:hhtFSsdruaGTZUY6eEbXzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc33ccd1151b7ea5eb1a0df31d603e8f_JaffaCakes118
Files
-
bc33ccd1151b7ea5eb1a0df31d603e8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
9165ea3e914e03bda3346f13edbd6ccd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
user32
MessageBoxA
wsprintfA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ