Static task
static1
Behavioral task
behavioral1
Sample
bd15cdd17b3669ebe80f598e6a6450dc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd15cdd17b3669ebe80f598e6a6450dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd15cdd17b3669ebe80f598e6a6450dc_JaffaCakes118
-
Size
92KB
-
MD5
bd15cdd17b3669ebe80f598e6a6450dc
-
SHA1
7c84192c5ef7ffb481d602c36716583a566dacf6
-
SHA256
f5f0d6dad4cfaf56ea76d21e44670f308ba0339702e5485932184838aa1c8d98
-
SHA512
39abca7721bb49e8bd7f4ead6527624460e8f8310fe93292f699c4396910c65a81da15988a8d765c4f421675deb3a887a2e6445cd2b2fb97356936c77607440d
-
SSDEEP
1536:PIAatTaoP1hfy+kD8N5r6dPzXIGAV2Skb:1atRNhfg8vr0zXIGLSkb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd15cdd17b3669ebe80f598e6a6450dc_JaffaCakes118
Files
-
bd15cdd17b3669ebe80f598e6a6450dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9f40c0b80c23ca0525230915493a431
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
ClearCommBreak
QueryDosDeviceA
EnumCalendarInfoW
SetEnvironmentVariableW
TryEnterCriticalSection
GetAtomNameA
CompareStringA
GetBinaryTypeA
LoadLibraryExW
WritePrivateProfileStringA
LocalAlloc
VirtualQueryEx
PurgeComm
EnumSystemCodePagesW
CancelIo
UnhandledExceptionFilter
CreateNamedPipeW
MoveFileExA
LocalLock
_hread
FlushFileBuffers
GetStartupInfoA
GetFileAttributesExA
GetUserDefaultLangID
GetUserDefaultLCID
GetLargestConsoleWindowSize
EnumResourceNamesW
WriteConsoleOutputCharacterA
_lclose
SetConsoleTitleA
ReleaseSemaphore
lstrcpyA
FindNextChangeNotification
GlobalFree
lstrcmpiW
EndUpdateResourceA
GetVolumeInformationW
GetFullPathNameA
SetProcessWorkingSetSize
EnumTimeFormatsW
LeaveCriticalSection
ExitThread
ExitProcess
FreeEnvironmentStringsA
PulseEvent
SizeofResource
lstrcmpA
ReadFile
GlobalAddAtomW
GlobalFlags
VirtualQuery
GlobalDeleteAtom
FormatMessageA
SystemTimeToFileTime
GlobalFindAtomW
RaiseException
GetCommandLineA
lstrlenA
VirtualAlloc
FindFirstFileW
user32
EnumDisplaySettingsA
CreateIconFromResource
SetCaretPos
RegisterWindowMessageW
EnableScrollBar
SetWindowRgn
SetMenuItemBitmaps
TrackPopupMenu
RegisterDeviceNotificationA
MessageBoxW
DefDlgProcA
PtInRect
LoadAcceleratorsA
MenuItemFromPoint
DefMDIChildProcA
CreateCaret
MessageBoxExA
GetTitleBarInfo
DefMDIChildProcW
DestroyWindow
LookupIconIdFromDirectory
UnionRect
InvalidateRect
GetMenuItemInfoA
CreateDialogIndirectParamA
LoadAcceleratorsW
CopyIcon
mouse_event
GetFocus
GetClipboardData
SystemParametersInfoA
GetClassInfoA
GetActiveWindow
InternalGetWindowText
SetWindowsHookExA
ActivateKeyboardLayout
SetThreadDesktop
gdi32
SetViewportOrgEx
EnumFontFamiliesExW
CreatePalette
CreatePolyPolygonRgn
GetGlyphOutlineW
SetTextJustification
SetPaletteEntries
CreateFontA
AbortDoc
CopyMetaFileA
SetMapperFlags
TextOutA
CreateDIBPatternBrush
UpdateColors
GetOutlineTextMetricsA
EnumMetaFile
GetStretchBltMode
CreateEllipticRgnIndirect
comdlg32
ChooseColorA
CommDlgExtendedError
ChooseFontW
advapi32
CreateServiceA
BuildSecurityDescriptorW
MakeSelfRelativeSD
MapGenericMask
shell32
SHGetDesktopFolder
ExtractIconA
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
CoRegisterClassObject
OleConvertIStorageToOLESTREAM
CoUninitialize
PropVariantCopy
ReadClassStg
CLSIDFromString
ReadFmtUserTypeStg
comctl32
ImageList_GetIcon
PropertySheetW
ImageList_Add
ImageList_LoadImageW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE