Static task
static1
Behavioral task
behavioral1
Sample
bced16b010e2106141629d467192c380_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bced16b010e2106141629d467192c380_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bced16b010e2106141629d467192c380_JaffaCakes118
-
Size
83KB
-
MD5
bced16b010e2106141629d467192c380
-
SHA1
bf8e272fa6f9b7e92107be68e1f6b2fc2a98983e
-
SHA256
b7da3bfe17ef366654d6a37dce25b644bee1bcd22de395d105d2c2a16f489bdd
-
SHA512
253fc3962c57daada48454e25d696e31244899d73f36a52fc8c52c256d90c94018c3f3e0eda92d8ca80c715b1e408d894cbe1cfae1589911a752628d3a9336e9
-
SSDEEP
1536:DYEylLHnAdTqwHl81XjzM2lQoTp9g7HDb8mNcyW+PoX9H7mErjAo:DqHARr81X3M2lQoTp9g7jlC+PWH7zrjb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bced16b010e2106141629d467192c380_JaffaCakes118
Files
-
bced16b010e2106141629d467192c380_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b5efe209e295d057e68ce22bf87adcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetVersion
LockResource
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetModuleHandleA
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
DeviceIoControl
FindResourceW
LoadResource
GetACP
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetStringTypeW
user32
EndPaint
BeginPaint
DestroyWindow
GetClientRect
GetSystemMetrics
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
LoadIconW
RegisterClassExA
DrawTextA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
FindWindowA
MessageBoxA
DialogBoxParamA
gdi32
TextOutA
CreateBitmap
Rectangle
ole32
CoTaskMemAlloc
CoInitialize
CoUninitialize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEB Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ