Static task
static1
Behavioral task
behavioral1
Sample
bfa250ca1ec735be51a814cd40d51376_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bfa250ca1ec735be51a814cd40d51376_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfa250ca1ec735be51a814cd40d51376_JaffaCakes118
-
Size
1.1MB
-
MD5
bfa250ca1ec735be51a814cd40d51376
-
SHA1
84bc7779dead800afe414d54383436014c44de50
-
SHA256
15d46641e18c239f55e1e705172c544c9d2457def7cb0fcc2dcba256f5c72a8e
-
SHA512
7724cb8a7048b7159ca1500d1e441a50ecab892474caa1e23bf3e3a88cc8dd9ff29e4c70c4bd87b85c5e614501e7d0eb138914181b9034893eb73c7f3e67b5b6
-
SSDEEP
24576:jqBqgao2CAm7rRDb8gblVhDK6e/4DHmObjihZ3aii:jqBqpUVDguVh047lbycD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa250ca1ec735be51a814cd40d51376_JaffaCakes118
Files
-
bfa250ca1ec735be51a814cd40d51376_JaffaCakes118.exe windows:6 windows x86 arch:x86
753b69e196c098a7cd36e7a7e0c7c228
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
DispatchMessageA
DestroyWindow
SendMessageA
UpdateWindow
BeginPaint
EndPaint
RegisterClassA
ShowWindow
DefWindowProcA
CreateWindowExA
TranslateMessage
GetMessageA
advpack
IsNTAdmin
FileSaveRestoreOnINF
RegRestoreAll
GetVersionFromFileEx
ExtractFiles
FileSaveRestore
odbc32
SQLFetchScroll
SQLTransact
PostODBCError
ODBCSetTryWaitValue
SQLDriverConnect
SQLSpecialColumns
SQLGetCursorName
SQLSetStmtOption
SQLTablesA
SQLGetInfo
PostComponentError
SQLFreeHandle
SQLExecDirectA
SQLForeignKeys
SQLProcedures
SQLColumns
SQLParamOptions
CursorLibLockDbc
SQLGetConnectOptionA
LockHandle
SQLEndTran
GetODBCSharedData
SQLSetScrollOptions
VRetrieveDriverErrorsRowCol
SQLSetParam
SQLGetDescField
SQLDisconnect
SQLGetCursorNameA
SQLBrowseConnect
SQLRowCount
SQLGetTypeInfoA
SQLStatistics
SQLSetDescFieldA
CursorLibLockDesc
SQLMoreResults
VFreeErrors
SQLForeignKeysA
SQLGetDiagRecA
kernel32
CreateFileA
ReadFile
CreateNamedPipeA
SetFilePointer
GetProcessHeap
lstrlenA
SystemTimeToFileTime
GetFileAttributesExA
DeleteFileA
GetSystemInfo
ConnectNamedPipe
CloseHandle
HeapSize
VirtualAlloc
GetSystemTime
CallNamedPipeA
ExitProcess
InterlockedPopEntrySList
lstrcmpiA
InterlockedExchangeAdd
WaitForMultipleObjects
InterlockedPushEntrySList
InterlockedCompareExchange
HeapDestroy
HeapFree
HeapAlloc
GetNamedPipeHandleStateA
VirtualFree
GetSystemTimeAsFileTime
InitializeSListHead
HeapCreate
Sections
.text Size: 667KB - Virtual size: 667KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 378KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 91KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ