Static task
static1
Behavioral task
behavioral1
Sample
bcba4f7b51bf9eb37c1e742c9e7d2f31_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bcba4f7b51bf9eb37c1e742c9e7d2f31_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcba4f7b51bf9eb37c1e742c9e7d2f31_JaffaCakes118
-
Size
29KB
-
MD5
bcba4f7b51bf9eb37c1e742c9e7d2f31
-
SHA1
3210f3da15cedfee1c378e3a57d75ad8d4dd2f69
-
SHA256
59b0a41842f1d0fb3986dfe3d8c759cd123a352b552d1a8a52adcf6b5de92acb
-
SHA512
1549de065e75331f8c49c6a1e5563551b5f7c35701b2349c9a6ce7b3cd40d437c54c80f5eb63c9caa11293a97e286d7abba28c11623c55cf8d0981962babd625
-
SSDEEP
384:K/rtZFG1SeR/YmScnNNHcMIP5O8l11if9P95naBtbF8GwUa0kHgaBnLNl6mESkEN:sZY1S+UMECVXaPuAa0Dunv67SRSJB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcba4f7b51bf9eb37c1e742c9e7d2f31_JaffaCakes118
Files
-
bcba4f7b51bf9eb37c1e742c9e7d2f31_JaffaCakes118.exe windows:4 windows x86 arch:x86
e979092f8e345c39399f7d98ab5d5f1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
CreateSolidBrush
kernel32
AddAtomA
CreateMutexA
CreateProcessA
ExitProcess
FindAtomA
FormatMessageA
GetAtomNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
LocalFree
OpenMutexA
SetUnhandledExceptionFilter
Sleep
msvcrt
_pclose
_popen
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_beginthread
_cexit
_endthread
_iob
_onexit
_setmode
_snprintf
_strnicmp
_vsnprintf
abort
atexit
atoi
ctime
fclose
fgets
fopen
free
fwrite
malloc
memcpy
memset
printf
rand
signal
srand
strcpy
strlen
strncmp
system
time
vprintf
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetAsyncKeyState
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetMessageA
GetWindowTextA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
TranslateMessage
ws2_32
WSAAsyncSelect
WSACleanup
WSAConnect
WSAGetLastError
WSASocketA
WSAStartup
accept
bind
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
listen
recv
select
send
socket
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE