Static task
static1
Behavioral task
behavioral1
Sample
bfb39d5e7b954576255a0fac6907401a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfb39d5e7b954576255a0fac6907401a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfb39d5e7b954576255a0fac6907401a_JaffaCakes118
-
Size
55KB
-
MD5
bfb39d5e7b954576255a0fac6907401a
-
SHA1
63fb4d62a09ae185e810f3e2eaf1a84193e67a11
-
SHA256
4a82b17cf75ba941d7bf88cbfa8b92d5790da8a573686ba0518362d208df8d16
-
SHA512
cc88ffd121622a679ffa44a0ccfab2382309f79d7a3fe91c4ce875453cb2dc3cd714a773164dc8f064987c2c0031241a93abf4eae5f2fd3e7277d5ccdef0ecb9
-
SSDEEP
384:xeet+kGwMTJf6y1xq3UZU9w1xq3UZU92pfLk:TokGwkZZU9qZU91
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfb39d5e7b954576255a0fac6907401a_JaffaCakes118
Files
-
bfb39d5e7b954576255a0fac6907401a_JaffaCakes118.exe windows:4 windows x86 arch:x86
20df2066bf5e5f414b84dc3fdd115cc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
DefWindowProcW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
EndDialog
PostQuitMessage
EndPaint
gdi32
TextOutW
msvcr80
_except_handler4_common
_decode_pointer
_invoke_watson
_controlfp_s
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.attach Size: 167B - Virtual size: 661B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE