Static task
static1
Behavioral task
behavioral1
Sample
bf4bec1dc16f3ff5cb81e27cb706498c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf4bec1dc16f3ff5cb81e27cb706498c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf4bec1dc16f3ff5cb81e27cb706498c_JaffaCakes118
-
Size
6KB
-
MD5
bf4bec1dc16f3ff5cb81e27cb706498c
-
SHA1
33f0a48bdef194842ab911c776633d5ac5ac3a95
-
SHA256
9054d0d502a4e9e206c930cb0e3b7bf3b5bd32b2d61fce7f397773046dddbacc
-
SHA512
bd794678b4ed171a2113f8306fc5e122797e0c1447ad24a2fc508a352f62748aebba596b3596e904acef69e3be77126080517a5c8d9d7cc6cad56c02854fcf9f
-
SSDEEP
96:N45KaoCEtrrsK8ZsPh49Tf67R9zfGJXTFyniMnnI:rqENwK8Zk45yR9yJTFyniUI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf4bec1dc16f3ff5cb81e27cb706498c_JaffaCakes118
Files
-
bf4bec1dc16f3ff5cb81e27cb706498c_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e95ff77341914b239b2c4ebffd21789
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalCompact
GetOEMCP
GetStdHandle
DeleteAtom
ClearCommBreak
GetCommState
GetProcessHeap
GlobalFree
CloseHandle
EnterCriticalSection
VirtualAlloc
GlobalFlags
LoadLibraryExA
CreateHardLinkA
ExitThread
FindAtomA
GlobalLock
ReadProcessMemory
GetProfileStringA
FormatMessageA
GetTapeStatus
user32
GetParent
ShowWindow
ReleaseDC
DrawEdge
GetForegroundWindow
GetActiveWindow
IsIconic
GetFocus
GetClassInfoExA
GetWindow
RegisterClassA
CloseWindow
BeginPaint
EndPaint
ValidateRect
GetWindowTextA
GetWindowTextLengthA
GetDC
GetClassNameA
wsock32
WSAIsBlocking
WSAAsyncSelect
WSAStartup
WSACleanup
WSAGetLastError
dot3api
Dot3SetProfile
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ