Static task
static1
Behavioral task
behavioral1
Sample
bddd9dbe27ccb6c78032e616d9957eed_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bddd9dbe27ccb6c78032e616d9957eed_JaffaCakes118
-
Size
502KB
-
MD5
bddd9dbe27ccb6c78032e616d9957eed
-
SHA1
e7026f0da5e462f6ee333ea03214b7603d2bf4f9
-
SHA256
03937f8be1425ba3c972024a3fa7e287591fd4c06108b66b5f86d919301a39d2
-
SHA512
679a83750fd40d3f4bea692322a198b4a935785ecbbee8e571ad367efa6cd2fe31d2db3a7fb48501b2e03a1dbb1a88e7da735a67e53169fb93858811b203bba0
-
SSDEEP
12288:vlGVyRwI6+/m0WRQe7II3RKViOaYqA59ynmKs:AyRmZRd7dhJA59ymK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bddd9dbe27ccb6c78032e616d9957eed_JaffaCakes118
Files
-
bddd9dbe27ccb6c78032e616d9957eed_JaffaCakes118.exe windows:5 windows x86 arch:x86
57e36c090c12eeb0cad64018baf6f3f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetCurrentProcess
OutputDebugStringW
GetCommandLineA
Sleep
GetModuleFileNameW
lstrcatA
lstrlenW
GetLastError
lstrcmpiA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
OutputDebugStringA
lstrcpyA
VirtualQuery
FlushFileBuffers
CloseHandle
CreateFileW
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
DecodePointer
GetModuleHandleW
ExitProcess
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapValidate
IsBadReadPtr
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
FreeLibrary
LoadLibraryW
RaiseException
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
RtlUnwind
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
WriteConsoleW
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
SetFilePointer
GetProcessHeap
user32
MessageBoxA
shell32
SHGetFileInfoA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 269KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ