Static task
static1
Behavioral task
behavioral1
Sample
bf3d43f902ef47990f2246502abafc6b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bf3d43f902ef47990f2246502abafc6b_JaffaCakes118
-
Size
61KB
-
MD5
bf3d43f902ef47990f2246502abafc6b
-
SHA1
b1ec4bddd52076f559a826843269dc9fe15c6d44
-
SHA256
4e860628ed4557b735204655c77e0f7329eaf4cc14fff1ed8dac9dbdb6c98848
-
SHA512
9a504a30e95cdf43322c9b4bb76f3053f81580d76e574b997766fadf9474bb139849af0e389c85b235798c2cc1da337b3804498a4b836db3f71d191ac88135e3
-
SSDEEP
768:fcZqRppRwya3xTp2/xUh6SdcbWTFFhVoGNj5oX5mDMBfImIlOYMGN0fn+rFAhPey:Vv8hMp+6RbqlL3y5mYfzGq85t1in
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf3d43f902ef47990f2246502abafc6b_JaffaCakes118
Files
-
bf3d43f902ef47990f2246502abafc6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
15ee246c2d9f16942099e3c112c85a23
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetSystemTime
DeviceIoControl
WaitForSingleObjectEx
GetStartupInfoW
VirtualProtectEx
SleepEx
LoadLibraryExW
GetStartupInfoW
GetStartupInfoW
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
SetThreadPriority
GetSystemTimeAsFileTime
GetStartupInfoA
CreateFileA
TerminateProcess
Sleep
GetStartupInfoA
SleepEx
SleepEx
LoadLibraryA
TerminateProcess
credui
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIReadSSOCredA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
CredUIParseUserNameA
CredUIInitControls
Sections
.text Size: 52KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ