Static task
static1
Behavioral task
behavioral1
Sample
bf18bcfde55a299fee3ce16f3d868d1b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf18bcfde55a299fee3ce16f3d868d1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf18bcfde55a299fee3ce16f3d868d1b_JaffaCakes118
-
Size
102KB
-
MD5
bf18bcfde55a299fee3ce16f3d868d1b
-
SHA1
c70e652ea6e0b9e668a97056eca59bf90081397e
-
SHA256
d2dd46b3b757a538a45ee833a4917ed5ee153725aa972ca8e28391323247f591
-
SHA512
7b9277fa133bbeecc12798a0405f900dd9c987a14d56f896bc8c4d02ed02f1f638bb91ee9bce8a82148196cbf02f39d6dc9822bdcffb8f19cf355474c8b32279
-
SSDEEP
768:cpw+evBs6MPJxmJu9cdvaJf0mLdIQclzLlsYJsCTaO48NP7qW7Vc8:Ww+eBsjcs9Ivg0wu9hVxpWGVR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf18bcfde55a299fee3ce16f3d868d1b_JaffaCakes118
Files
-
bf18bcfde55a299fee3ce16f3d868d1b_JaffaCakes118.exe windows:1 windows x86 arch:x86
8ee28ef523e5aaf4f0d360ebcfdb1bcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetProcAddress
GetVersionExA
InterlockedIncrement
GetStartupInfoA
GetModuleFileNameA
WaitForSingleObject
GetVersionExA
VirtualFree
HeapAlloc
MultiByteToWideChar
GetSystemTimeAsFileTime
LoadLibraryA
lstrcpyW
LeaveCriticalSection
GetProcAddress
HeapAlloc
Sleep
HeapReAlloc
TerminateProcess
CreateThread
InitializeCriticalSection
GetProcAddress
GetVersionExA
LocalAlloc
Sections
.jcsu Size: 87KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qfyl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ihfa Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tkbg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ujtg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ulvx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yyxh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.glbs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rowa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gaqt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE