Static task
static1
Behavioral task
behavioral1
Sample
bc34db1fce3aca458e683ee81dbd361b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc34db1fce3aca458e683ee81dbd361b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc34db1fce3aca458e683ee81dbd361b_JaffaCakes118
-
Size
252KB
-
MD5
bc34db1fce3aca458e683ee81dbd361b
-
SHA1
7cfc84b45a4e120bc4dc7d788ac309731a548192
-
SHA256
16c76557acccd1c48261d05ce519744afd7341462aadb31beca3b3828dfaf5a9
-
SHA512
131d4afa40bb2e62f36c7736f7309b4ef69bb681e9b114c13570ec48abb8803635812766b20deb6e56327a8f3b2d9bf95e937a190e5193b1e2975bd8dc200222
-
SSDEEP
6144:Ua0B/PyhU+3Ml08tDk0bFYIEooRDti+n5P/Kc5:UaA/YUoX8a0bFYIEowDti
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc34db1fce3aca458e683ee81dbd361b_JaffaCakes118
Files
-
bc34db1fce3aca458e683ee81dbd361b_JaffaCakes118.exe windows:4 windows x86 arch:x86
784e6a58f5e7beae34fb7984c015ded3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
SetConsoleCtrlHandler
SetLastError
GetCommandLineA
RaiseException
GetFileType
GetLastError
VirtualAlloc
VirtualFree
GetVersionExA
CloseHandle
GetStdHandle
FormatMessageA
DebugBreak
FreeLibrary
GetCurrentThread
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
ReadFile
SetEndOfFile
SetFilePointer
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetFileInformationByHandle
Sleep
WriteFile
DeleteFileA
WaitForSingleObject
SetThreadPriority
CreateProcessA
GetACP
FlushFileBuffers
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetCPInfo
GetOEMCP
SetEnvironmentVariableA
CompareStringA
CompareStringW
SetStdHandle
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE