Static task
static1
Behavioral task
behavioral1
Sample
bfcb1024d2aa95f1e747938828c18380_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfcb1024d2aa95f1e747938828c18380_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfcb1024d2aa95f1e747938828c18380_JaffaCakes118
-
Size
473KB
-
MD5
bfcb1024d2aa95f1e747938828c18380
-
SHA1
f1fdfce5392889267eec820d32f3ee75c2980c79
-
SHA256
225d84a391313c346da834d263bdbfc0d9594bdf990f7679d86f2957cefc5dbd
-
SHA512
090a5814ae5b9e0a4b2a8187086fe169b88df8aef23b3e6a8ac59f7d9bac32400f10823355afdc88e41e0f871f10fa80d0c6e5eab427c8ca7fdbb934127b0132
-
SSDEEP
12288:D3Nm7qFhck+XnwoBtAXVaY7odLSJbQW+k+qN:t4NXqVOLSJF3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfcb1024d2aa95f1e747938828c18380_JaffaCakes118
Files
-
bfcb1024d2aa95f1e747938828c18380_JaffaCakes118.exe windows:5 windows x86 arch:x86
2b30b5432910bc48e74fa76b7b45fd88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
GetLastError
GetProcAddress
LoadLibraryA
HeapReAlloc
HeapFree
VirtualFree
VirtualAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
WideCharToMultiByte
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
GetModuleFileNameW
GetStartupInfoW
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
UnhandledExceptionFilter
GetCommandLineW
Sleep
ExitProcess
FindAtomW
GetStdHandle
GetModuleFileNameA
RtlUnwind
AddConsoleAliasW
GetCurrentProcess
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapCreate
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
GetProcessHandleCount
GetSystemInfo
LoadLibraryExW
user32
CreateWindowExW
DefWindowProcW
DispatchMessageW
GetMessageW
RegisterClassExW
TranslateMessage
AdjustWindowRect
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ