Static task
static1
Behavioral task
behavioral1
Sample
bfaac06de1e5926a3b4df0feff5756d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfaac06de1e5926a3b4df0feff5756d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfaac06de1e5926a3b4df0feff5756d2_JaffaCakes118
-
Size
358KB
-
MD5
bfaac06de1e5926a3b4df0feff5756d2
-
SHA1
caf1d6ff5e1ea96d8778eedd91df35bf368111a4
-
SHA256
ecc4191e378b35aa492118751283c44971afecc7305a6eaeee06e7e97078c43f
-
SHA512
97e33a03762ec47462b6fc03ae5cc0c8cbd215111e40439a9452210824d201e3be91a12dd690b134c082364c43345917688dafa09c0c1e78c0fe2bfbf7ae9172
-
SSDEEP
6144:OVgfg9gfvqMg7+hLS7KyDACp8flicE8dSbcJyh33Xgb6+JODdYDLfV5OwgU:OC/HqMZLNj3fls8Fy9XgbHIYX9d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfaac06de1e5926a3b4df0feff5756d2_JaffaCakes118
Files
-
bfaac06de1e5926a3b4df0feff5756d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
34d9985872388a1b8237296006653d39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCursor
EnumWindows
SendMessageA
GetSysColor
GetSysColorBrush
DefDlgProcA
IntersectRect
RegisterClassA
GetWindow
TrackPopupMenu
InvalidateRect
GetKeyState
BeginDeferWindowPos
RedrawWindow
DispatchMessageA
CheckMenuItem
OpenClipboard
LoadBitmapA
LoadAcceleratorsA
ExitWindowsEx
IsDlgButtonChecked
EndDialog
EndDeferWindowPos
EnableWindow
EnumChildWindows
DrawTextA
CallWindowProcA
WindowFromPoint
EndPaint
MapWindowPoints
GetSubMenu
GetDC
GetDoubleClickTime
SetWindowPos
CheckRadioButton
SetPropA
GetCursorPos
GetMenuItemID
RegisterWindowMessageA
IsIconic
GetClientRect
MoveWindow
FindWindowExA
DestroyWindow
ReleaseDC
SetClipboardData
InflateRect
LoadCursorA
GetMenuItemCount
GetPropA
DefWindowProcA
GetSystemMetrics
SetMenuItemInfoA
LoadStringA
ClientToScreen
LoadImageA
InvalidateRgn
OffsetRect
RegisterClassExA
ScreenToClient
CreateDialogParamA
FindWindowA
DeferWindowPos
ReleaseCapture
CreateWindowExA
LoadMenuA
SetWindowPlacement
GetScrollInfo
GetClassNameA
wsprintfA
FillRect
ShowWindow
DialogBoxParamA
CreatePopupMenu
GetFocus
TranslateAcceleratorA
GetParent
ChildWindowFromPoint
FrameRect
GetWindowTextA
DrawIconEx
SetCapture
KillTimer
LoadIconA
IsZoomed
SetScrollInfo
DefMDIChildProcA
DestroyIcon
PeekMessageA
GetWindowPlacement
CloseClipboard
CreateIconIndirect
SetTimer
BeginPaint
SetWindowLongA
UnionRect
GetDlgItem
IsDialogMessageA
UpdateWindow
DrawFrameControl
EnableMenuItem
MsgWaitForMultipleObjects
SetFocus
SetDlgItemTextA
TranslateMessage
GetMessageA
DefFrameProcA
CreateMenu
IsWindowVisible
SetWindowTextA
DeleteMenu
GetWindowRect
TrackPopupMenuEx
GetWindowLongA
SystemParametersInfoA
GetCapture
oleaut32
SetErrorInfo
VariantTimeToDosDateTime
ole32
CoInitialize
CoUninitialize
shell32
Shell_NotifyIconA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteExA
SHGetFileInfoA
comdlg32
dwLBSubclass
ChooseColorA
advapi32
QueryServiceStatus
RegOpenKeyExA
StartServiceA
RegEnumValueA
CreateProcessAsUserA
RegDeleteValueA
EqualSid
RegCloseKey
CloseServiceHandle
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
comctl32
ImageList_Create
ImageList_DrawEx
InitCommonControlsEx
ImageList_Write
ImageList_GetIcon
kernel32
SetConsoleWindowInfo
SetConsoleCursorInfo
GetThreadTimes
CloseHandle
ExitProcess
_hread
RegisterWaitForSingleObject
GetProcAddress
SetFileValidData
GetLastError
LoadLibraryA
SetThreadAffinityMask
Module32NextW
ReleaseMutex
CreateEventA
RequestDeviceWakeup
GetModuleHandleA
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ