Static task
static1
Behavioral task
behavioral1
Sample
bc62dbbf9f9a22a8d148ff287c09a3e0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc62dbbf9f9a22a8d148ff287c09a3e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc62dbbf9f9a22a8d148ff287c09a3e0_JaffaCakes118
-
Size
67KB
-
MD5
bc62dbbf9f9a22a8d148ff287c09a3e0
-
SHA1
3ab56338ac880531f6dbc28d3d9d837fd5274d85
-
SHA256
612ce68e34ee022ceea719ab4f974d462e435262de0eae2d5c4902c25f12143b
-
SHA512
6d759251055b2f7aacbbb4c651573f8d143b6dca9062edb4341d2532ee5691c342ade38970db24aad5f5d76dd2b654a3d559820e5a64c4c66dbfaacc93a357f7
-
SSDEEP
768:e+ZX0XJWszQRrsb6NvuSU6FHAJ2rnT1csNKKntAhy32g9qTI:Z0XJXsrsb6gSU6FgkrT1lzAhG2gsI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc62dbbf9f9a22a8d148ff287c09a3e0_JaffaCakes118
Files
-
bc62dbbf9f9a22a8d148ff287c09a3e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b909b1594cdf6c34ea30be15999fb5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Thread32First
WaitNamedPipeA
EnumDateFormatsExA
Heap32Next
GlobalUnlock
SetEnvironmentVariableW
GetConsoleCharType
lstrcmpA
GlobalAddAtomW
RaiseException
SetEnvironmentVariableW
GetDevicePowerState
CreateMemoryResourceNotification
GetVolumeNameForVolumeMountPointA
GetConsoleCommandHistoryA
GetSystemTimeAdjustment
DelayLoadFailureHook
GetPrivateProfileStructW
AddAtomW
ReadConsoleOutputAttribute
MapViewOfFileEx
GetVDMCurrentDirectories
WriteConsoleA
GetStartupInfoA
FlushFileBuffers
IsValidLocale
SetFileApisToOEM
GetConsoleWindow
SetConsoleIcon
CreateActCtxA
GetConsoleInputWaitHandle
GetProcAddress
GetEnvironmentVariableA
ExpandEnvironmentStringsW
LoadLibraryA
GetLastError
Sleep
SetConsoleKeyShortcuts
GetSystemRegistryQuota
Beep
ReadConsoleInputExA
CreateFileMappingA
GetConsoleProcessList
SetClientTimeZoneInformation
ActivateActCtx
BaseCleanupAppcompatCacheSupport
EnumTimeFormatsW
GetTempPathA
SetHandleContext
SetFirmwareEnvironmentVariableW
GetConsoleTitleW
VirtualAlloc
GetThreadTimes
EnumCalendarInfoA
GetSystemDefaultUILanguage
SetFileShortNameW
GlobalCompact
VirtualFree
ResetEvent
DeleteFileA
DebugSetProcessKillOnExit
FormatMessageA
GetNumberOfConsoleFonts
SetTapePosition
SetConsoleInputExeNameA
LocalHandle
GetSystemWow64DirectoryA
FindVolumeClose
GetExpandedNameW
OpenEventW
CreateMutexW
SleepEx
ReadConsoleInputW
GetConsoleCommandHistoryLengthW
FileTimeToSystemTime
WriteConsoleInputA
SetConsoleScreenBufferSize
GlobalDeleteAtom
WaitForDebugEvent
WritePrivateProfileStructA
GetConsoleInputWaitHandle
CreateProcessInternalA
BaseQueryModuleData
ActivateActCtx
GetFileType
LocalLock
GetPrivateProfileSectionNamesA
GetConsoleAliasesA
Process32NextW
LZClose
GetACP
EnumLanguageGroupLocalesA
GetQueuedCompletionStatus
SystemTimeToTzSpecificLocalTime
LeaveCriticalSection
EnumResourceTypesA
GetShortPathNameW
SetFileShortNameW
TerminateThread
CreateFileW
SetConsoleIcon
HeapCompact
GetProcessHeaps
CloseHandle
OpenProfileUserMapping
ReleaseMutex
GetFileSizeEx
SetEnvironmentVariableW
IsBadHugeReadPtr
GetConsoleAliasesA
GetPrivateProfileStructW
MapViewOfFile
CreateHardLinkA
AttachConsole
RtlCaptureContext
GetLastError
HeapAlloc
GetCurrentProcessId
ReadProcessMemory
GlobalAddAtomA
EnumResourceNamesW
GetSystemDirectoryA
FreeUserPhysicalPages
EnumTimeFormatsW
CreateDirectoryExA
EnumCalendarInfoW
CreateMailslotA
UnlockFile
SetLocalPrimaryComputerNameA
GetDateFormatA
CopyLZFile
FindNextVolumeW
SetLocalPrimaryComputerNameW
LocalCompact
CreateSocketHandle
GetModuleHandleExA
GetSystemDefaultLCID
GetHandleContext
SetHandleContext
WriteConsoleA
CancelDeviceWakeupRequest
GetNumberOfConsoleInputEvents
RemoveDirectoryW
ReleaseActCtx
LoadModule
GetComputerNameW
RtlCaptureStackBackTrace
GetModuleHandleExW
HeapCreate
WriteConsoleOutputCharacterW
GetNumberFormatW
SetCommState
SetConsoleCursorPosition
GetExitCodeThread
GetConsoleTitleW
InterlockedDecrement
DebugBreakProcess
QueryInformationJobObject
LocalLock
GetProfileStringA
WTSGetActiveConsoleSessionId
GlobalAddAtomA
CloseProfileUserMapping
SetEnvironmentVariableW
LocalFree
GetSystemDefaultUILanguage
SetDllDirectoryA
FatalExit
MapUserPhysicalPages
RegisterConsoleOS2
SetCommBreak
CancelTimerQueueTimer
SetFileAttributesA
GetModuleHandleExA
LoadLibraryA
OutputDebugStringA
GetProcessHeaps
SetConsoleFont
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE