Static task
static1
Behavioral task
behavioral1
Sample
bc9aa00d4c7870f17028c9a849f94d8b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bc9aa00d4c7870f17028c9a849f94d8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc9aa00d4c7870f17028c9a849f94d8b_JaffaCakes118
-
Size
36KB
-
MD5
bc9aa00d4c7870f17028c9a849f94d8b
-
SHA1
588f76dcd2f5785d5c10c5053d0b10765520c008
-
SHA256
57af2312367c4c6a33258d58b62991d93004999cd34a784623319892179e91ad
-
SHA512
321ea40acfa622ffeafc233e77472b2de7f92d2eeaadda0bc774287757cde92378046e5e131bdd3cd00721aaee2f0099d8c2923a1fbf015b0ccf3cff5e6ba0a2
-
SSDEEP
768:nTMNPWNUXd0B/4pfc4LDW/e8K1hPoPmr:ngNPPvc4Ly/AoPM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc9aa00d4c7870f17028c9a849f94d8b_JaffaCakes118
Files
-
bc9aa00d4c7870f17028c9a849f94d8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
65f51c0fb36d823cf5d92089375d4f8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
WriteProcessMemory
FreeLibrary
CreateThread
GetTickCount
GetProcAddress
LoadLibraryA
ReadProcessMemory
GetVersionExA
GetCurrentProcess
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
FlushFileBuffers
HeapReAlloc
SetStdHandle
HeapAlloc
GetOEMCP
VirtualAlloc
GetCPInfo
LCMapStringW
GetACP
MultiByteToWideChar
SetFilePointer
LCMapStringA
WriteFile
RtlUnwind
GetLastError
VirtualFree
HeapCreate
CloseHandle
HeapFree
GetModuleFileNameA
GetFileType
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
FreeEnvironmentStringsW
GetStdHandle
HeapDestroy
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
user32
ReleaseDC
GetDlgItemTextA
SendMessageA
SetDlgItemTextA
GetSystemMetrics
GetDC
SetWindowPos
GetDlgItem
GetWindowRect
EnableWindow
DestroyWindow
PeekMessageA
DefWindowProcA
RegisterClassA
CreateWindowExA
ShowWindow
LoadImageA
CreateDialogParamA
DispatchMessageA
GetMessageA
TranslateMessage
SetCursor
PostQuitMessage
LoadCursorA
gdi32
CreateFontIndirectA
DeleteObject
SetBkColor
CreateSolidBrush
GetDeviceCaps
advapi32
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
RegEnumKeyExA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ