Static task
static1
Behavioral task
behavioral1
Sample
bcb57eafca447d55756fcbc8f2a8938e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bcb57eafca447d55756fcbc8f2a8938e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcb57eafca447d55756fcbc8f2a8938e_JaffaCakes118
-
Size
393KB
-
MD5
bcb57eafca447d55756fcbc8f2a8938e
-
SHA1
7b1a94283e36aff79f7a0da193a465fe74cdbcb6
-
SHA256
c604f8d9e0b988c76b957e10efec5dd80fb38d682e722a1289ffedf0ecaf8687
-
SHA512
ce59e17aade215ec480077b14a0ef1379c41005bf7b42be48a66674c7fba5353c42782f0c0f5612eca03114f51df6e959e8445afc481445fce5892a5b9b59917
-
SSDEEP
12288:pJn3KpJI6xj1dV9fJcEXW4OYIb5IiENCaTbAL:pFCb1dV9fJhXWGHNDbAL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcb57eafca447d55756fcbc8f2a8938e_JaffaCakes118
Files
-
bcb57eafca447d55756fcbc8f2a8938e_JaffaCakes118.exe windows:4 windows x86 arch:x86
300c139a77216042fe216a146bdf36d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
LoadLibraryExA
LocalLock
GetLastError
FreeEnvironmentStringsA
CloseHandle
GetACP
GetModuleHandleA
GlobalUnlock
FindAtomA
FindClose
TlsGetValue
GetCalendarInfoA
LocalFree
Sleep
CreateFileMappingA
GetConsoleCP
CreateFileA
WaitForMultipleObjects
GetConsoleAliasA
user32
IsWindow
DrawTextA
GetDlgItem
DefWindowProcA
CreateDialogParamA
GetIconInfo
SetFocus
GetMessageA
GetDC
DispatchMessageA
DrawEdge
CallWindowProcA
CascadeWindows
MessageBoxA
msasn1
ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecSkip
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ