Static task
static1
Behavioral task
behavioral1
Sample
bdf7cb5e6b60450bf6ad43b7d1816e8e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bdf7cb5e6b60450bf6ad43b7d1816e8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdf7cb5e6b60450bf6ad43b7d1816e8e_JaffaCakes118
-
Size
102KB
-
MD5
bdf7cb5e6b60450bf6ad43b7d1816e8e
-
SHA1
c02124be4065664eee07aadd0e70d39e574d0ccd
-
SHA256
b35664736861b1b1868f38b3cff19a1f77b846003fc4134085e37ba666f726c6
-
SHA512
e71dbb4e95d053998ca4c37d7bd7bc9e635103bbce1276417af92bda21f275f6816a44f257572dfa27c0c037c9d8fd2a4ea41101f46f9d1098f3c397317f8fac
-
SSDEEP
3072:6vB00k0L6DtQFhQ95cNl83psIJh5gi7ZG/+M4lf1OcWvq6T:6vB0GL6Dc+5a2LhZwP4lAcWvq6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf7cb5e6b60450bf6ad43b7d1816e8e_JaffaCakes118
Files
-
bdf7cb5e6b60450bf6ad43b7d1816e8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbd02d49543c4773af4a0530ba946c40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
LocalFileTimeToFileTime
LoadResource
GetTickCount
SetLastError
CreateProcessA
lstrcpyA
GetCurrentThreadId
GetLocalTime
GetCommandLineA
SetUnhandledExceptionFilter
lstrlenA
FreeLibrary
Sleep
GetSystemDirectoryA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
CreateFileA
ReadFile
HeapFree
CloseHandle
ExitProcess
GetTempPathA
LoadLibraryA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
OutputDebugStringA
WritePrivateProfileStringA
user32
GetMessageA
wsprintfA
PostThreadMessageA
GetInputState
advapi32
EqualSid
OpenServiceA
CloseServiceHandle
StartServiceA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
OpenSCManagerA
shell32
DoEnvironmentSubstA
shlwapi
PathFileExistsA
msvcrt
fopen
_strcmpi
??1type_info@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
_access
sprintf
strchr
fwrite
strstr
??2@YAPAXI@Z
_except_handler3
realloc
malloc
fclose
_strlwr
??3@YAXPAX@Z
netapi32
NetApiBufferFree
NetUserGetLocalGroups
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ