Static task
static1
Behavioral task
behavioral1
Sample
bfcacfcba232d1a4a418561487c926db_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bfcacfcba232d1a4a418561487c926db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfcacfcba232d1a4a418561487c926db_JaffaCakes118
-
Size
113KB
-
MD5
bfcacfcba232d1a4a418561487c926db
-
SHA1
fd89816df4926a409b3fc2a7a6d46e9e2baf9d70
-
SHA256
0311fd7fce466a55fc0b81abe18c5a6fbaaccc325cc03ec1ed056b47dc470394
-
SHA512
2f52206384d79f902724df2a03ed7d2bc1d078d495ceb14068aa5fd0365c13c301338f0ee36fbb7a02ea0553f2c49fd6df94ada550cefe3ee1791f8ea34ea65f
-
SSDEEP
1536:PG8O/gt0326lqdU5IBcJ015pKFhlwMtcLQpY8EMwfqe974roBspzcD/PDAZ0zO:O+nwtcLQW7ffqe97QjRcL8Z0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfcacfcba232d1a4a418561487c926db_JaffaCakes118
Files
-
bfcacfcba232d1a4a418561487c926db_JaffaCakes118.exe windows:5 windows x86 arch:x86
ae9e8065b69acc20c374e66cbc6a68d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
CreateSolidBrush
SetTextColor
RectVisible
GetObjectA
SaveDC
SetStretchBltMode
GetClipBox
GetStockObject
LineTo
DeleteDC
SelectObject
DeleteObject
GetPixel
CreatePalette
SetTextAlign
CreateCompatibleDC
SetMapMode
RestoreDC
PatBlt
CreateFontIndirectA
CreatePen
GetTextMetricsA
SelectPalette
SetPixel
kernel32
GetTickCount
GetCommandLineA
GetUserDefaultLangID
GlobalFindAtomA
GetCurrentProcess
lstrcmpA
GetConsoleOutputCP
GlobalFindAtomW
MulDiv
GetVersion
GetACP
GetWindowsDirectoryA
lstrlenW
GetCurrentThread
GetStartupInfoA
SetCurrentDirectoryA
lstrlenA
GetCurrentThreadId
GetProcessHeap
DeleteFileW
IsDebuggerPresent
GetDriveTypeA
GetCommandLineW
GetModuleHandleW
GetModuleHandleA
GetCurrentProcessId
VirtualAlloc
VirtualFree
lstrcmpiA
GetOEMCP
GetThreadLocale
DeleteFileA
RemoveDirectoryW
QueryPerformanceCounter
RemoveDirectoryA
lstrcmpiW
CopyFileA
user32
TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetParent
CharNextA
glu32
gluQuadricCallback
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ