Static task
static1
Behavioral task
behavioral1
Sample
bccc211ea49b2142ae62b0051843fd08_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bccc211ea49b2142ae62b0051843fd08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bccc211ea49b2142ae62b0051843fd08_JaffaCakes118
-
Size
207KB
-
MD5
bccc211ea49b2142ae62b0051843fd08
-
SHA1
43ee145442d3f95287a6e699164b909e52bd2cf9
-
SHA256
db147195137e6d83b64f9b6850a796ee2fc596afee67c1c88ab9c93436c40f88
-
SHA512
587810f8b0f86a715df4ac8b6b5daa986a21496fd050e6028a899daaba403ed5c53dfd659856fc249a569a4b74082b65e13ad1b44b5c3ea432280db630d1989d
-
SSDEEP
6144:kfCnB4tuRxfmSEVD4033I637wlV/gBjI7hHHEmTNUv+:kfIzRxfmSEH3IRpZEmh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bccc211ea49b2142ae62b0051843fd08_JaffaCakes118
Files
-
bccc211ea49b2142ae62b0051843fd08_JaffaCakes118.exe windows:4 windows x86 arch:x86
78cbb5381339ca65bfc6a1c05432e233
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseSemaphore
GetModuleHandleW
GetSystemTimeAsFileTime
CreateFiberEx
TlsGetValue
WaitForSingleObject
GetProcessHeap
TlsAlloc
GetTickCount
TlsFree
DeleteFileW
TerminateThread
Sleep
IsDebuggerPresent
FoldStringW
LoadLibraryA
GetCommandLineW
InterlockedExchange
EnumResourceNamesA
VirtualProtect
RaiseException
GetLastError
InterlockedCompareExchange
GetCurrentProcess
QueryPerformanceCounter
TerminateProcess
GetCurrentThreadId
FlushFileBuffers
LoadLibraryW
GetLocaleInfoW
GetCurrentProcessId
GetStartupInfoA
CloseHandle
FreeLibrary
SetUnhandledExceptionFilter
GetProcAddress
UnhandledExceptionFilter
CreateSemaphoreW
LocalAlloc
GetModuleFileNameW
msimg32
AlphaBlend
setupapi
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
user32
LoadIconW
RealGetWindowClass
MapVirtualKeyW
ShowWindow
GetSystemMetrics
UpdateWindow
SetWindowPos
IsWindow
IsZoomed
GetParent
SetWindowPlacement
IsIconic
GetWindowPlacement
LoadImageW
DestroyWindow
SetForegroundWindow
Sections
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ