Static task
static1
Behavioral task
behavioral1
Sample
bf28aaf5b0cd90888c158d7a013fa823_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf28aaf5b0cd90888c158d7a013fa823_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf28aaf5b0cd90888c158d7a013fa823_JaffaCakes118
-
Size
355KB
-
MD5
bf28aaf5b0cd90888c158d7a013fa823
-
SHA1
18e6b7952221046ecc0a540c7f1de8d9eb847595
-
SHA256
0b224c31a10f3991a936a64f7b10931ab57a16e5a3ad71229f9b1c1b9dc006ec
-
SHA512
4571c61638090c5e6c6c497a6b0fe9a0d37d12fba191821df1ea9bad43847a00091a37f812fc2ee36d23f0282c157060740d8c4225921ec93640fc6f5e96285d
-
SSDEEP
6144:ZqCMFHLq57HcnENDD9HX5JWQE34IOhchyeIwILmCOCqyVieZjnvTofOqfqidc+R:kCMxDEN9HX5k34IOhchyeIwILrOgZjni
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf28aaf5b0cd90888c158d7a013fa823_JaffaCakes118
Files
-
bf28aaf5b0cd90888c158d7a013fa823_JaffaCakes118.exe windows:4 windows x86 arch:x86
29b819a2aaa5d14bde54f06b34a20940
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
wininet
CreateUrlCacheEntryA
HttpSendRequestW
InternetOpenA
SetUrlCacheGroupAttributeA
kernel32
LCMapStringA
LeaveCriticalSection
VirtualQuery
LoadLibraryA
GetLocaleInfoA
HeapFree
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
VirtualFree
TerminateProcess
GetCurrentThread
HeapCreate
GetConsoleOutputCP
GetTimeFormatA
GetStringTypeA
SetLastError
GetStringTypeW
HeapDestroy
TlsFree
SetConsoleCtrlHandler
GetModuleFileNameA
GetEnvironmentStringsW
GetProcAddress
FlushFileBuffers
ReadFile
GetStdHandle
HeapReAlloc
GetStartupInfoA
GetOEMCP
TlsSetValue
GetCurrentProcess
GetACP
GetCommandLineA
GetLocaleInfoW
IsValidCodePage
VirtualAlloc
GetLastError
Sleep
TlsAlloc
InterlockedDecrement
EnumSystemLocalesA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetCommandLineW
GetConsoleMode
TlsGetValue
WriteConsoleW
CloseHandle
RtlUnwind
ExitProcess
CompareStringA
GetFileType
SetStdHandle
EnterCriticalSection
GetTickCount
GetDateFormatA
IsValidLocale
GetUserDefaultLCID
FreeEnvironmentStringsW
InterlockedIncrement
HeapSize
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
DeleteCriticalSection
IsDebuggerPresent
CreateFileA
SetFilePointer
CompareStringW
FillConsoleOutputCharacterA
GetConsoleCP
SetHandleCount
FreeLibrary
QueryPerformanceCounter
CreateMutexA
WideCharToMultiByte
OpenMutexA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
LCMapStringW
GetTimeZoneInformation
HeapAlloc
GetStartupInfoW
WriteConsoleA
GetModuleHandleW
InterlockedExchange
WriteFile
user32
RegisterClassExA
SetCursorPos
CharUpperBuffW
ChangeDisplaySettingsA
EmptyClipboard
GetWindowLongW
GetClipboardOwner
RegisterClipboardFormatW
RegisterClassA
FreeDDElParam
LoadMenuIndirectA
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ