Static task
static1
Behavioral task
behavioral1
Sample
bf0fbd42914a51012c7136c6ee3de6fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf0fbd42914a51012c7136c6ee3de6fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf0fbd42914a51012c7136c6ee3de6fc_JaffaCakes118
-
Size
119KB
-
MD5
bf0fbd42914a51012c7136c6ee3de6fc
-
SHA1
cd57242ed07e85db0024e92638241030ec4a27ec
-
SHA256
ec21dfdd53294d5b5fad2843c3f8d377c98b234885070d9c34acf1e488dd0150
-
SHA512
f5bfff4450d27e7caa30059a87d19d8069edd4da4a4ad00f10335019cbe2fa59636d03b102386a6c527b4718226210638a14e56301b768deb41627d1d722b1d7
-
SSDEEP
3072:zmNks1mXn9JnYQ2INnlFwbKwzVCStWGHeUo9:6kN9JnYQ9vPn9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf0fbd42914a51012c7136c6ee3de6fc_JaffaCakes118
Files
-
bf0fbd42914a51012c7136c6ee3de6fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
3dc2e83d1cdc5701af495a7374e9fdac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
CreateDirectoryA
GetCommandLineA
ExitProcess
HeapFree
RtlUnwind
ExpandEnvironmentStringsA
GetLastError
GetFullPathNameA
GetStartupInfoA
GetVersion
HeapAlloc
HeapReAlloc
FindNextFileA
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
FindClose
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
CloseHandle
SetFilePointer
ReadFile
GetCurrentDirectoryA
GetDriveTypeA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
SetEndOfFile
GetTempPathA
GetTempFileNameA
lstrcpyA
FindFirstFileA
LoadResource
LockResource
FreeResource
GetModuleHandleA
GetProcAddress
LoadLibraryA
FindResourceA
DeleteFileA
GetSystemDirectoryA
GetWindowsDirectoryA
lstrcmpA
lstrlenA
WideCharToMultiByte
GetEnvironmentStringsW
GetCurrentThreadId
SetHandleCount
FreeLibrary
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapSize
user32
SystemParametersInfoA
DefWindowProcA
GetLastActivePopup
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
ModifyMenuA
GetMenuState
IsWindow
MapWindowPoints
GetClientRect
GetWindow
CreateWindowExA
CreateDialogIndirectParamA
ScreenToClient
ClientToScreen
CallWindowProcA
DestroyWindow
GetWindowTextA
GetWindowTextLengthA
SetWindowLongA
PostQuitMessage
GetTopWindow
IsDialogMessageA
DrawTextA
InvalidateRect
IsIconic
GetWindowPlacement
GetSystemMetrics
GetAsyncKeyState
GetWindowRect
MapDialogRect
GetCapture
EndDialog
IsWindowEnabled
GetWindowLongA
SetWindowPos
GetActiveWindow
SetActiveWindow
EndPaint
BeginPaint
ReleaseDC
GetDesktopWindow
GetWindowDC
CopyRect
LoadImageA
DestroyCursor
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
SetCursor
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
MessageBoxA
EnableWindow
ShowWindow
IsWindowVisible
SetFocus
GetSysColor
PostMessageA
GetDlgItem
SetWindowTextA
GetParent
LoadIconA
SendMessageA
UpdateWindow
WinHelpA
LoadStringA
gdi32
AddFontResourceA
SetBkColor
CreateFontIndirectA
CreateCompatibleDC
DeleteDC
CreateSolidBrush
DeleteObject
CreatePen
ExtTextOutA
SelectObject
SetBkMode
BitBlt
GetObjectA
LineTo
MoveToEx
SetPixelV
SetTextColor
Rectangle
CreateCompatibleBitmap
comctl32
PropertySheetA
ord17
advapi32
RegSetValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
shell32
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ