Static task
static1
Behavioral task
behavioral1
Sample
bfa933bc1df406819176d010bb7a9ddd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfa933bc1df406819176d010bb7a9ddd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfa933bc1df406819176d010bb7a9ddd_JaffaCakes118
-
Size
147KB
-
MD5
bfa933bc1df406819176d010bb7a9ddd
-
SHA1
3be14fe6c148a8384fc708d235c567cbd76a322f
-
SHA256
98134af5e14f3e2724630ffbc5f7179601ca8ea9bd53530e8f0d3a2a8d75ea1a
-
SHA512
9fa66d2677174e7037bfc194d4a9e76de907de0795c374216f20d2ddc49f8c6a1c5a6998a380a524566aad67b41c5b285c985a8e86952c18d3712619be597dc8
-
SSDEEP
3072:uNJipBCcT59nJziN4p8jgPnUcWWqltPNqG:uNJipoO+4p4gPUcWt/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa933bc1df406819176d010bb7a9ddd_JaffaCakes118
Files
-
bfa933bc1df406819176d010bb7a9ddd_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec2f37e05c76a91bec3f4882e11b998
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControls
comdlg32
GetOpenFileNameA
imagehlp
MapFileAndCheckSumA
kernel32
CloseHandle
CopyFileA
CreateFileA
CreateThread
ExitProcess
ExitThread
FindResourceA
GetFileSize
GetModuleHandleA
GlobalAlloc
GlobalFree
LoadResource
LockResource
SetFilePointer
SizeofResource
WriteFile
lstrcatA
lstrcpyA
ResumeThread
SetThreadPriority
Sleep
SuspendThread
shell32
ShellExecuteA
user32
CheckDlgButton
DialogBoxParamA
EndDialog
IsDlgButtonChecked
LoadIconA
MessageBoxA
SendMessageA
SetDlgItemTextA
SetWindowTextA
winmm
waveOutClose
waveOutGetPosition
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE