Static task
static1
Behavioral task
behavioral1
Sample
bfa8263cc3a90efbc91d46dbe7c2be5c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bfa8263cc3a90efbc91d46dbe7c2be5c_JaffaCakes118
-
Size
92KB
-
MD5
bfa8263cc3a90efbc91d46dbe7c2be5c
-
SHA1
8e496bce3f4134ac02fa69b9723c108c4910cfbf
-
SHA256
93a8a646a092a423fd0bc39ec2363e394e41a5dd5f7417a88f5c5a46f4641f2b
-
SHA512
bad8649b3ffa6a2220ea38e64264ea2f677538561bcedd47725fd21b004e17e32fdf6c52edbcf82d1e2769aa4073c4bead6702881281e3da43be7e97a1cb211e
-
SSDEEP
1536:oXx1X7P+1IGN5detPU6MzEBpa1cub/tVZfSFHQu+Ev5SaPZpmjB/Fyy3i3zM4:oB5z+1jN5YtPBMwO95VZf4HQwxSaPfqw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa8263cc3a90efbc91d46dbe7c2be5c_JaffaCakes118
Files
-
bfa8263cc3a90efbc91d46dbe7c2be5c_JaffaCakes118.exe windows:5 windows x86 arch:x86
b7ba4bc77c1801012eb46856d54e1a72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndPaint
GetWindowLongA
SetWindowTextA
DestroyMenu
LoadIconA
LoadCursorA
RegisterClassExA
BeginPaint
CreatePopupMenu
EnableMenuItem
GetMessageA
CreateWindowExA
ShowWindow
UpdateWindow
TranslateMessage
DispatchMessageA
CheckMenuRadioItem
gdi32
GetStockObject
CreateHatchBrush
DeleteObject
MoveToEx
CreateSolidBrush
GetBkColor
ole32
OleIsCurrentClipboard
CreateObjrefMoniker
GetConvertStg
ProgIDFromCLSID
CreateItemMoniker
StringFromCLSID
OleRegGetMiscStatus
CoInitialize
oleaut32
CreateErrorInfo
kernel32
GlobalFree
GetLastError
GetVersionExA
DeleteCriticalSection
GlobalAlloc
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
HeapCreate
GetModuleHandleA
FreeLibrary
GetCommandLineA
GetStartupInfoA
LoadLibraryA
LeaveCriticalSection
GetACP
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE