Static task
static1
Behavioral task
behavioral1
Sample
bdaff9381a18ff6715157d8ae382d305_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdaff9381a18ff6715157d8ae382d305_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdaff9381a18ff6715157d8ae382d305_JaffaCakes118
-
Size
2.6MB
-
MD5
bdaff9381a18ff6715157d8ae382d305
-
SHA1
02c43fdd12faa89cd1b86bd39dc1127178d31aa1
-
SHA256
a9056d7135d2544106a1ae3ee98719bdd6751a3e3aa9caa0c18a09ab4264dc0f
-
SHA512
3cfdc60754fd06780d182907311d999c08fa0b67823b072974b84536565c91778479951c524af20e1104cd2fb4c82ebac1e0462c12784dcf83c15944084baf67
-
SSDEEP
49152:+zFzhVtFbvOa4vDKBIR+ed0jk+3aSJGbz3u4ioo0OmVdZim/+aReB7Uu6qtcy:+zfxbvGvvcQ0jDqK2uLooodZimBR7q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdaff9381a18ff6715157d8ae382d305_JaffaCakes118
Files
-
bdaff9381a18ff6715157d8ae382d305_JaffaCakes118.exe windows:4 windows x86 arch:x86
5ad0583698835f573915b92c3b192569
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenPrivileges
CloseServiceHandle
GetSecurityDescriptorControl
GetUserNameA
RegCloseKey
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
StartServiceCtrlDispatcherA
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateProcessA
CreateThread
DeleteAtom
DeleteCriticalSection
DisableThreadLibraryCalls
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
FindFirstFileA
FindNextFileA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetComputerNameA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetExitCodeProcess
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathA
GetThreadTimes
GetTickCount
GetTimeFormatA
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapReAlloc
HeapSize
InterlockedIncrement
IsDebuggerPresent
LCMapStringA
LeaveCriticalSection
LoadResource
LockResource
Module32First
Module32Next
MulDiv
OpenEventA
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryA
ResetEvent
ResumeThread
SetCurrentDirectoryA
SetEndOfFile
SetFileAttributesA
SetHandleCount
SetLastError
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsFree
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
lstrcmpiA
lstrcpyA
lstrlenA
ole32
CoGetMalloc
CoMarshalInterThreadInterfaceInStream
OleInitialize
OleRegEnumVerbs
user32
BeginPaint
CallNextHookEx
CharNextA
CreateWindowExA
DefWindowProcA
DestroyMenu
DispatchMessageA
EnableMenuItem
EnableWindow
EndPaint
EqualRect
FindWindowA
GetDlgCtrlID
GetSysColorBrush
GetSystemMenu
GetWindowPlacement
LoadStringA
MessageBoxA
PostMessageA
RegisterClassA
RegisterClipboardFormatA
ReleaseDC
ScreenToClient
SetWindowRgn
SetWindowTextA
SystemParametersInfoA
TrackPopupMenu
wsprintfA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
CODE Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CRT Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ