Static task
static1
Behavioral task
behavioral1
Sample
bd9c8f0f3203a233dbb5bbe296ab44c0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd9c8f0f3203a233dbb5bbe296ab44c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd9c8f0f3203a233dbb5bbe296ab44c0_JaffaCakes118
-
Size
144KB
-
MD5
bd9c8f0f3203a233dbb5bbe296ab44c0
-
SHA1
60b4733565c40c9a5b277d07de8542de2cb112bc
-
SHA256
84f409319e3a0adae23b6daa45f29e240084c0280775370add4fed2b1111f4f6
-
SHA512
caf6377cc32ba2c32e48157ce9c06aa4293a404e30717fbb0c27573a6d8d08594822e805ad32eac0314abced7d1ac4bcf60e1ff8b81e244984f6c3eeb2179547
-
SSDEEP
1536:j3OKUe1+meUUJPTnsogDmRNgLS/Yi+8lT88F1mPWbNCJPO3q7VoagH7:DOKEmWJPTUCRNgLS/9HF11bqOa7Voa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd9c8f0f3203a233dbb5bbe296ab44c0_JaffaCakes118
Files
-
bd9c8f0f3203a233dbb5bbe296ab44c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
eb2c7fcca265b74bd2d38a8200c8a934
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileW
OpenFile
FindFirstFileA
DeleteFileA
GetComputerNameA
CopyFileExA
GetFileTime
CopyFileA
ReadConsoleA
ReadConsoleW
ExitThread
GetLastError
GetCommandLineA
GetConsoleMode
WriteFile
OpenFileMappingA
DeleteAtom
CreateThread
OpenFile
CopyFileExW
SetLastError
FindAtomA
CopyFileExA
DeleteFileW
Sleep
WriteFile
GetCommandLineA
GetConsoleMode
ReadConsoleW
GetLastError
CopyFileW
GlobalFree
GetComputerNameA
GetFileTime
CreateDirectoryA
OpenFileMappingA
ReadFile
DeleteAtom
GetCommandLineA
ReadConsoleW
GetLastError
GetComputerNameA
CreateThread
CopyFileW
SetLastError
WriteFile
ExitThread
GetCPInfo
CreateDirectoryA
FindFirstFileA
CopyFileA
OpenFile
ReadFile
CopyFileExW
OpenFileMappingA
ReadConsoleA
DeleteFileW
GlobalFree
comctl32
ImageList_Create
ImageList_LoadImage
ImageList_Merge
ImageList_Destroy
ImageList_GetImageRect
ImageList_DragShowNolock
ImageList_DrawIndirect
ImageList_GetImageCount
ImageList_Draw
ImageList_GetDragImage
ImageList_BeginDrag
InitCommonControls
ImageList_DrawEx
ImageList_DragMove
ImageList_LoadImageW
ImageList_Copy
ImageList_DragEnter
ImageList_Replace
ImageList_Read
ImageList_LoadImageA
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_LoadImage
ImageList_EndDrag
ImageList_Replace
ImageList_DragMove
ImageList_AddIcon
ImageList_LoadImageA
ImageList_DragEnter
ImageList_BeginDrag
ImageList_Merge
InitCommonControls
ImageList_AddMasked
ImageList_Copy
ImageList_GetIcon
ImageList_Create
ImageList_Remove
ImageList_GetImageRect
ImageList_DrawIndirect
ImageList_Read
ImageList_ReplaceIcon
gdi32
GetDCOrgEx
AddFontMemResourceEx
AbortPath
ClearBrushAttributes
ClearBitmapAttributes
ExtTextOutA
CloseFigure
CancelDC
CloseMetaFile
ExcludeClipRect
GetClipBox
GetBitmapBits
CreateSolidBrush
GetBrushOrgEx
GetPixel
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 58B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 733B
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ