Static task
static1
Behavioral task
behavioral1
Sample
bc9f2c68a90f69f8aa02589cea7b2043_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc9f2c68a90f69f8aa02589cea7b2043_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc9f2c68a90f69f8aa02589cea7b2043_JaffaCakes118
-
Size
187KB
-
MD5
bc9f2c68a90f69f8aa02589cea7b2043
-
SHA1
ed2e40043a4a60d9c343d28a1d2a7b5d2216ae8e
-
SHA256
fa8f6f6105c0ab08c792d43ceb68534b55ef7ade50c257b9206cb304d375568f
-
SHA512
584d8c89775ded984e05b6aba13f16599fe1cc0b9e8d0cf62476c4a642aa4c125633fc93f30f55d42eb56f6977cf01c470232ab204ce016737d249f9c586ffc2
-
SSDEEP
3072:qJYUYNf29YpKdDuwD/Ki/FZqnKkw8Yp2u1m5Vmzcm0ywZ5+AeRcLytlcm6F:0YUYNfDpKdSOK6FZqnKOYIu1yVhlyc5z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc9f2c68a90f69f8aa02589cea7b2043_JaffaCakes118
Files
-
bc9f2c68a90f69f8aa02589cea7b2043_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1a2cc34fa898afd13b7ceb31d52bed4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
GetTickCount
WriteFile
Sleep
SizeofResource
GetSystemDirectoryA
lstrcatA
GetProcAddress
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
ReleaseMutex
CloseHandle
FindResourceA
ResumeThread
lstrcpyA
GetStdHandle
GetLastError
GetVersion
GetCurrentProcessId
GetSystemInfo
VirtualProtect
HeapSize
GetTempPathA
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetStartupInfoA
GetCommandLineA
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
HeapAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
SetStdHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
FlushFileBuffers
user32
GetGuiResources
OpenIcon
DestroyWindow
advapi32
RegOpenKeyExA
ws2_32
socket
gethostbyname
bind
WSACleanup
shutdown
htons
WSAStartup
connect
closesocket
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ