Static task
static1
Behavioral task
behavioral1
Sample
bf03619f0438f60b97a4c0f4420bde78_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf03619f0438f60b97a4c0f4420bde78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf03619f0438f60b97a4c0f4420bde78_JaffaCakes118
-
Size
72KB
-
MD5
bf03619f0438f60b97a4c0f4420bde78
-
SHA1
4523d269eba9c577ec98d17c7bedb480507d5616
-
SHA256
08c48b38098fe07b01fd56d96715824ad93343c87fc941a9eb874d784e2d1f1b
-
SHA512
1a2cfa60337d5c483ba08ea60d4de4ab282e0a79ca4c6a5ffb3afb074a6e8cdec05e72337afa776c33f2d14263ad821f5cc2eedc0d44a84f87079a5d0d74abdb
-
SSDEEP
768:7HzApDt3ydDMUWjvBYxY3QgvZr80udLg0kamlUJrjhHzHRsg:7Ty1yC/jv2xYhudU0gUJrjhHzHRH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf03619f0438f60b97a4c0f4420bde78_JaffaCakes118
Files
-
bf03619f0438f60b97a4c0f4420bde78_JaffaCakes118.exe windows:4 windows x86 arch:x86
9354a0069a2d9b65af5c2389a6b3571d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetProcAddress
GetModuleHandleA
ReadFile
GetFileSize
SetFileAttributesA
lstrcatA
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
lstrlenA
LoadLibraryExA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
SetFileTime
GetFileTime
LockResource
GetCurrentProcessId
GlobalFree
Sleep
FreeLibrary
DeviceIoControl
GetLastError
FindResourceA
LoadResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
GetSystemDirectoryA
OpenProcess
GetStartupInfoA
advapi32
CloseServiceHandle
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
StartServiceA
OpenSCManagerA
OpenServiceA
ControlService
mfc42
ord924
ord537
ord823
ord825
ord535
ord800
msvcrt
exit
_acmdln
__getmainargs
tolower
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
_adjust_fdiv
__CxxFrameHandler
_initterm
_stricmp
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ