Static task
static1
Behavioral task
behavioral1
Sample
bcbcd7db62cba2e05e404a761de6582b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcbcd7db62cba2e05e404a761de6582b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcbcd7db62cba2e05e404a761de6582b_JaffaCakes118
-
Size
35KB
-
MD5
bcbcd7db62cba2e05e404a761de6582b
-
SHA1
051f5b086f3e93723baa2e273c20a14b8a5b7897
-
SHA256
0fcf8ba7b6a81b0d5d2f7191eeb7611d8168b58d17eb599e2f29f70d6e28a545
-
SHA512
fa33556e8dab5d9875276dde451da710624a2e68fa8264e5a0cd7c1756772aeec66273e6ab942b9b96a7aec915a66fba36c1259213b7cbb91d842963e91f42ef
-
SSDEEP
768:oKZfiSCgtwBroZ19wTMALjSdVm7fUptRbz:o2f3CgtKwzwTwzm2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcbcd7db62cba2e05e404a761de6582b_JaffaCakes118
Files
-
bcbcd7db62cba2e05e404a761de6582b_JaffaCakes118.exe windows:5 windows x86 arch:x86
78ccfaf1bd4e0a09c44b8d72231fdb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
GetVersionExA
InitializeCriticalSection
VirtualProtect
GetCurrentThreadId
CreateThread
UnhandledExceptionFilter
LoadLibraryA
GetModuleFileNameA
GetModuleFileNameA
InterlockedCompareExchange
GetProcessHeap
GetVersionExA
GetProcAddress
InterlockedExchange
GetLastError
QueryPerformanceCounter
CreateFileW
InterlockedIncrement
VirtualProtect
VirtualProtect
GetVersionExA
MultiByteToWideChar
GetSystemTimeAsFileTime
lstrlenA
GetModuleFileNameA
HeapDestroy
LoadLibraryW
GetModuleHandleA
LocalAlloc
CreateEventW
SetLastError
CloseHandle
DisableThreadLibraryCalls
GetModuleHandleW
lstrcmpiW
SetLastError
CreateThread
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
LeaveCriticalSection
lstrcmpiW
EnterCriticalSection
FreeLibrary
InterlockedCompareExchange
GetModuleHandleW
InterlockedIncrement
SetLastError
HeapDestroy
LocalFree
EnterCriticalSection
GetTickCount
ReadFile
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetLastError
VirtualAlloc
InterlockedExchange
MultiByteToWideChar
UnhandledExceptionFilter
VirtualProtect
lstrcmpiW
lstrcmpiW
GetModuleFileNameW
GetModuleFileNameA
CreateThread
InitializeCriticalSection
GetSystemTimeAsFileTime
CreateThread
GetLastError
LoadLibraryW
FreeLibrary
InterlockedExchange
GetTickCount
lstrcmpiW
LocalFree
LocalAlloc
InitializeCriticalSection
lstrlenA
GetModuleFileNameW
CreateThread
HeapFree
LeaveCriticalSection
HeapFree
CreateThread
HeapDestroy
HeapFree
user32
SetDlgItemTextW
CreateWindowExW
LoadCursorW
IsWindow
GetDC
IsWindow
SetDlgItemTextW
BeginPaint
MessageBoxW
DispatchMessageW
SetWindowPos
BeginPaint
LoadIconW
GetDesktopWindow
GetSystemMetrics
SendMessageW
GetParent
EnableWindow
LoadStringW
EndPaint
BeginPaint
KillTimer
EndPaint
MessageBoxW
wsprintfA
BeginPaint
SetFocus
GetWindowLongW
BeginPaint
EndPaint
MessageBoxW
GetDC
GetDC
GetFocus
SetWindowPos
GetWindowRect
GetWindowLongW
PostQuitMessage
SendDlgItemMessageW
LoadStringW
InvalidateRect
ShowWindow
EndPaint
InvalidateRect
ReleaseDC
SendMessageW
DispatchMessageW
GetParent
LoadCursorW
ReleaseDC
LoadStringW
LoadCursorW
TranslateMessage
TranslateMessage
LoadIconW
GetDlgItem
GetSysColor
GetClientRect
CreateWindowExW
IsWindow
SetDlgItemTextW
GetDC
GetSysColor
IsDlgButtonChecked
GetSysColor
IsDlgButtonChecked
EndPaint
SetWindowLongW
SetFocus
SetWindowTextW
GetClientRect
GetParent
IsWindow
InvalidateRect
GetWindowLongW
GetFocus
GetSystemMetrics
SetFocus
IsDlgButtonChecked
GetSystemMetrics
IsWindow
PeekMessageW
MessageBoxW
GetParent
EndPaint
TranslateMessage
GetWindowLongW
GetParent
SetTimer
Sections
.text Size: 26KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ