Static task
static1
Behavioral task
behavioral1
Sample
bcdc73b81dbd2406e4552097e9889dc8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bcdc73b81dbd2406e4552097e9889dc8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcdc73b81dbd2406e4552097e9889dc8_JaffaCakes118
-
Size
1.2MB
-
MD5
bcdc73b81dbd2406e4552097e9889dc8
-
SHA1
3029e304d2d863e0463f2369d10caf91044d4542
-
SHA256
6369e55fe1338c8a297eab0ef83e796ae3064d41eb338e89161fc3b36b579f2b
-
SHA512
7dd7793827e49fb3394e42e2570cf8a1747b3135fbc805c5bd3976511c5a14deb22bf60a1c47fd90c69c46ab155b5d841fdcb33a280493d1175b40cb5ba5bf6c
-
SSDEEP
24576:eraDkYVyrExZQbd33EiXcV8Qt2f5VdQvUhET:MmkLrEPQp3UycZ2D2vC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcdc73b81dbd2406e4552097e9889dc8_JaffaCakes118
Files
-
bcdc73b81dbd2406e4552097e9889dc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
64234fe6c8580e5e74beabf747163cb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
RemoveDirectoryA
SetCurrentDirectoryA
EnumResourceNamesA
CreateDirectoryA
lstrcpynA
GetSystemDirectoryA
Sleep
GetUserDefaultLangID
LockResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
lstrcmpiA
SetFileAttributesA
lstrcmpA
GetStartupInfoA
ExitProcess
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
GetProcessHeap
HeapReAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
LocalFree
GetLastError
SetLastError
GetVersionExA
WaitForSingleObject
GetCurrentDirectoryA
GetFileAttributesA
GetDriveTypeA
CreateEventA
ResetEvent
SetEvent
ReleaseMutex
MapViewOfFile
CreateFileMappingA
CreateMutexA
UnmapViewOfFile
WaitForMultipleObjects
FreeLibrary
CreateProcessA
MultiByteToWideChar
lstrcatA
CreateFileA
lstrlenW
WriteFile
CloseHandle
DeleteFileA
HeapAlloc
lstrlenA
user32
GetKeyboardType
CharNextA
GetClassNameA
SendMessageA
EnumWindows
LoadStringA
MessageBoxA
wsprintfA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
ole32
CoInitialize
CoUninitialize
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ