Static task
static1
Behavioral task
behavioral1
Sample
bf3f64162b9d9d3ee42f7dee96316e9c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bf3f64162b9d9d3ee42f7dee96316e9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf3f64162b9d9d3ee42f7dee96316e9c_JaffaCakes118
-
Size
78KB
-
MD5
bf3f64162b9d9d3ee42f7dee96316e9c
-
SHA1
e7a1a8b58a56add139aed6a969eeb2f85dac5a95
-
SHA256
32647ac1260562d7aa63062510844dbb15f4b8a9ba70cd8a56febf3e8c82f30a
-
SHA512
7ff694e79c29c06da2f261f79ea1abe87c8a7a825828a665ee25d8cba5a22fca43135b37107824ee8e2db0d62b59799af6090f95df2c453cdf3030163fea0c1e
-
SSDEEP
1536:9UrJYRpjC09qPfalXGYnx31EgskpUPIoITlMR6IjoY8bfuPHUjnYjV/d/5b5FNUb:EYRJPvXHx3SkCexCrZgaHq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf3f64162b9d9d3ee42f7dee96316e9c_JaffaCakes118
Files
-
bf3f64162b9d9d3ee42f7dee96316e9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
db59fa48f43d07ded06e1ab07402205f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CreateDirectoryExA
CreateMailslotA
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
FindFirstFileA
FindNextFileA
FindResourceExA
GetDiskFreeSpaceW
GetEnvironmentVariableW
GetPrivateProfileSectionA
GetProcessShutdownParameters
IsBadStringPtrW
LocalReAlloc
OutputDebugStringW
QueryPerformanceCounter
ReadConsoleA
ReadConsoleOutputCharacterW
RtlUnwind
ScrollConsoleScreenBufferA
SetConsoleMode
SetUnhandledExceptionFilter
Thread32First
UnhandledExceptionFilter
WriteProfileSectionW
lstrcmpA
user32
AlignRects
BroadcastSystemMessageA
BroadcastSystemMessageW
CharPrevA
CheckMenuRadioItem
CopyImage
CreateCaret
CreateCursor
DdeReconnect
EnumDisplayDevicesA
FillRect
GetInternalWindowPos
GetShellWindow
IsCharAlphaNumericW
IsCharUpperW
LoadImageW
LoadMenuIndirectA
MapVirtualKeyExW
MapWindowPoints
RegisterWindowMessageA
SetMenuItemInfoA
SetWindowTextA
UnhookWindowsHookEx
UserClientDllInitialize
gdi32
CreateBitmap
CreateColorSpaceA
CreateCompatibleBitmap
CreateScalableFontResourceW
DeleteObject
DescribePixelFormat
Ellipse
Escape
ExtSelectClipRgn
GdiSetBatchLimit
GetArcDirection
GetBitmapDimensionEx
GetBrushOrgEx
GetCharWidth32A
GetDCOrgEx
GetEnhMetaFileA
GetPaletteEntries
GetPolyFillMode
GetTextCharset
GetTextExtentPoint32A
LineDDA
PolyBezierTo
RoundRect
SetICMMode
StartPage
UpdateICMRegKeyW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ