Static task
static1
Behavioral task
behavioral1
Sample
bf648bdbec53ede6dc94ae76df8ec2cb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf648bdbec53ede6dc94ae76df8ec2cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf648bdbec53ede6dc94ae76df8ec2cb_JaffaCakes118
-
Size
293KB
-
MD5
bf648bdbec53ede6dc94ae76df8ec2cb
-
SHA1
707a418424861fad24321c69d4abe298b086213d
-
SHA256
9ed3e3513be9792fc3f09edf3b61cfd91994a12d02e65c2495ff24e2fe25c7cb
-
SHA512
a3161aeffb706a1296f151e349bba6db9edb1696ca57359cdf60ddc8196a4cd54ee55f7194233971fc2fca09e1daebf3565cbe2a5093a95bbc188d9514808223
-
SSDEEP
3072:1h3F7exI+INtEYsiA1HqY+ZrkYckpUxPHP0UPu6IUtR+iT9eBn6W7IPpftBKKcWW:1h17+DYDKcLcwUx/NDhIn6W0Up
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf648bdbec53ede6dc94ae76df8ec2cb_JaffaCakes118
Files
-
bf648bdbec53ede6dc94ae76df8ec2cb_JaffaCakes118.exe windows:5 windows x86 arch:x86
c4f62d6b929aba39983b74ca3656842f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcA
CheckDlgButton
CreatePopupMenu
ShowWindow
SetWindowTextA
UpdateWindow
SetWindowPos
SetWindowLongA
SetFocus
SetWindowRgn
TrackPopupMenu
SetDlgItemTextA
SetClassLongA
SetCapture
SendMessageA
ReleaseCapture
RegisterClassExA
RedrawWindow
PtInRect
OffsetRect
MessageBoxA
LoadStringA
LoadIconA
LoadCursorA
LoadBitmapA
IsDlgButtonChecked
InvalidateRect
IntersectRect
GetWindowRect
GetWindowLongA
GetSystemMetrics
GetParent
GetKeyState
CloseClipboard
EmptyClipboard
OpenClipboard
SetClipboardData
GetClientRect
MoveWindow
GetDlgItemTextA
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetCapture
GetActiveWindow
EndDialog
EnableWindow
DrawTextA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
AppendMenuA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
gdi32
CreateFontIndirectA
CreateSolidBrush
ExtCreateRegion
GetObjectA
GetPixel
GetStockObject
BitBlt
CreateCompatibleBitmap
TextOutA
SetTextColor
SetPixel
SetBkMode
SetBkColor
SelectObject
RoundRect
RemoveFontResourceA
GetTextExtentPointA
AddFontResourceA
CreateCompatibleDC
comctl32
ord17
kernel32
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
HeapCreate
HeapReAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetEnvironmentStringsW
GetLastError
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
HeapSize
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
RtlUnwind
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
UnmapViewOfFile
Sleep
SizeofResource
SetFilePointer
SetFileAttributesA
SetEnvironmentVariableA
SetEndOfFile
MoveFileA
MapViewOfFile
LoadResource
GetTempPathA
GetModuleHandleA
GetFileSize
GetFileAttributesA
GetCurrentDirectoryA
GetCommandLineA
FreeLibrary
FindResourceA
ExpandEnvironmentStringsA
ExitProcess
DeleteFileA
CreateThread
CreateProcessA
CreateFileMappingA
CreateFileA
CopyFileA
CloseHandle
VirtualAlloc
VirtualFree
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
FlushFileBuffers
GlobalUnlock
GlobalLock
GlobalAlloc
CreateDirectoryA
SetCurrentDirectoryA
GetModuleFileNameA
CompareStringA
WriteFile
HeapAlloc
GetStartupInfoA
GetCPInfo
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ