Static task
static1
Behavioral task
behavioral1
Sample
bf67f88dde63392dbad4493af9783be4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf67f88dde63392dbad4493af9783be4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf67f88dde63392dbad4493af9783be4_JaffaCakes118
-
Size
123KB
-
MD5
bf67f88dde63392dbad4493af9783be4
-
SHA1
d05f5bbbbf234a2d4ea3d189727c034aaca490c5
-
SHA256
a141eb29bf20aa2cf4e240aceddd73d981e1028d1c81a122575006cfeb8aa522
-
SHA512
cfe4b6f0533e7e5b5980860da52cbe699d371fc2bba5926817370a800e711d316868729c401cad7982ac9d8ec67a3d7b574b4ef23176b489fd3523d0631e4e84
-
SSDEEP
3072:gcngk6j/0ILN1pskjZYbFOD7EL+qK6fV/7KbbsRpyf+n8:gcLIFubFOHL07KbbsRpU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf67f88dde63392dbad4493af9783be4_JaffaCakes118
Files
-
bf67f88dde63392dbad4493af9783be4_JaffaCakes118.exe windows:4 windows x86 arch:x86
29a638744c2b7a43dbc08275dcbc6e93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
avifil32
AVIFileInfoA
user32
AdjustWindowRectEx
CheckRadioButton
CharNextW
DeferWindowPos
CreateIcon
DdeCreateStringHandleA
CreateIconIndirect
DestroyWindow
DdeUninitialize
DeleteMenu
DrawStateA
DialogBoxParamA
EnumClipboardFormats
GetCaretPos
GetIconInfo
GetClipboardFormatNameA
GetMessageTime
GetFocus
EnableWindow
GetSubMenu
GetSystemMenu
GetWindowThreadProcessId
GetScrollPos
GetMessageA
GetPropA
GetSysColorBrush
PeekMessageA
GetDlgItemTextW
IsChild
GetWindowTextLengthW
GetMenuItemID
IsCharAlphaA
LoadBitmapA
MessageBoxW
GetWindowTextLengthA
LoadMenuA
PostMessageA
InsertMenuItemW
IsCharAlphaNumericA
LoadStringA
mouse_event
OemToCharA
SetMenuItemBitmaps
MsgWaitForMultipleObjects
GetWindowTextA
PtInRect
RegisterClipboardFormatA
ReleaseDC
SystemParametersInfoW
SubtractRect
SetCursorPos
ScrollWindowEx
MessageBoxA
OffsetRect
SendMessageA
ScrollDC
LoadAcceleratorsA
SetPropA
RegisterWindowMessageA
SystemParametersInfoA
ShowCaret
SetWindowTextA
SetFocus
SetParent
kernel32
CompareStringA
CreateFileMappingW
CloseHandle
FindNextChangeNotification
FindFirstFileW
DeleteFileW
CreateThread
GetLocalTime
GetExitCodeProcess
GetLogicalDrives
FileTimeToLocalFileTime
GetSystemTime
GetProcessWorkingSetSize
GetPriorityClass
GetShortPathNameA
GetOEMCP
GetPrivateProfileSectionW
GetProcessTimes
GlobalHandle
IsDebuggerPresent
GetTimeZoneInformation
HeapAlloc
GetShortPathNameW
GetStringTypeW
OpenMutexW
GlobalSize
HeapDestroy
LocalAlloc
lstrcpynA
GlobalDeleteAtom
GetVersionExW
LeaveCriticalSection
MapViewOfFile
GetTickCount
VirtualFree
WritePrivateProfileSectionW
lstrcmpiA
LocalFree
IsValidCodePage
SizeofResource
SetUnhandledExceptionFilter
OpenProcess
RaiseException
RtlUnwind
msvcrt
__p__environ
_strnicmp
memcmp
sprintf
wsock32
WSAStartup
ole32
IsEqualGUID
OleDraw
CoInitialize
OleSetMenuDescriptor
Sections
CODE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 577B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ