Static task
static1
Behavioral task
behavioral1
Sample
bfdea466fac3a313230af810366328b9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfdea466fac3a313230af810366328b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfdea466fac3a313230af810366328b9_JaffaCakes118
-
Size
708KB
-
MD5
bfdea466fac3a313230af810366328b9
-
SHA1
3828d9cc329f2848f1d63fd45677e18948ba8173
-
SHA256
80309e9cdc078ff35eab2676cbfc9e804b6052f1964d2f7a89104a750636f90f
-
SHA512
99cceb149d65637d9e8fd870db1af347bc2ec5eec59faccbdde35f2933620c2ace5fec7687b397273ef5ec3d19ea2b9c120435d26c72a20bad535ac716f7ff16
-
SSDEEP
12288:aeL1AQ8SwssW8T9u2IeOwPJWENOiPZSPcGuSZOgr4sKw:aeBAR9ssW8M2IeOCJAck74sKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfdea466fac3a313230af810366328b9_JaffaCakes118
Files
-
bfdea466fac3a313230af810366328b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
555e8294de9fe73498024e8437fd9e42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
FindClose
FindFirstFileA
SetFileTime
WriteFile
GetDiskFreeSpaceA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
SetConsoleTitleA
GetFullPathNameA
GetShortPathNameA
MoveFileA
GetFileSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
GetFileType
GetProcAddress
LoadLibraryA
FlushFileBuffers
ExpandEnvironmentStringsA
SearchPathA
GetEnvironmentVariableA
SetConsoleOutputCP
SetConsoleCP
SetEnvironmentVariableA
GetModuleFileNameA
SetConsoleWindowInfo
SetConsoleScreenBufferSize
AllocConsole
FreeConsole
ReadConsoleInputA
PeekConsoleInputA
WaitForMultipleObjects
GetStdHandle
WaitForSingleObject
CreateProcessA
GetConsoleScreenBufferInfo
GetConsoleOutputCP
GetConsoleCP
TerminateProcess
GetCurrentProcess
FreeLibrary
GetCurrentDirectoryA
DeleteFileA
RemoveDirectoryA
CreateFileA
SetFileApisToOEM
SetFileApisToANSI
CopyFileA
GetModuleHandleA
MoveFileExA
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToDosDateTime
FindNextFileA
ReleaseMutex
GetFileTime
CreateMutexA
GetFileInformationByHandle
BackupWrite
lstrcpyW
QueryDosDeviceA
DefineDosDeviceA
FindFirstChangeNotificationA
FindCloseChangeNotification
SetCurrentDirectoryA
GetCompressedFileSizeA
GlobalMemoryStatus
GetComputerNameA
CreateFileW
GetFileAttributesA
SetConsoleMode
GetConsoleMode
FlushConsoleInputBuffer
WriteConsoleInputA
SetConsoleCursorPosition
SetConsoleCursorInfo
GetConsoleCursorInfo
SetConsoleTextAttribute
WriteConsoleOutputA
WriteConsoleOutputW
ReadConsoleOutputA
ReadConsoleOutputW
SetConsoleActiveScreenBuffer
SetConsoleCtrlHandler
GetLargestConsoleWindowSize
GetCurrentProcessId
WriteConsoleInputW
ReadConsoleInputW
ReadConsoleA
ReadConsoleW
PeekConsoleInputW
CompareStringA
GetVersionExA
FormatMessageA
FileTimeToLocalFileTime
GetLocaleInfoA
GetLogicalDrives
FileTimeToSystemTime
GetCurrentThreadId
OpenProcess
RaiseException
LoadLibraryExA
lstrlenA
GetTickCount
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
HeapSize
InterlockedExchange
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
LCMapStringW
LCMapStringA
GetStartupInfoA
SetHandleCount
UnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCommandLineA
ExitProcess
RtlUnwind
HeapReAlloc
HeapAlloc
HeapFree
CreateThread
ResumeThread
ExitThread
CreateDirectoryA
GetLastError
SetFileAttributesA
GetConsoleTitleA
GetTempPathA
lstrlenW
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
GlobalFree
GetCurrentThread
GetThreadPriority
SetThreadPriority
GetLocalTime
Sleep
GetDriveTypeA
CloseHandle
SetStdHandle
DeviceIoControl
CompareStringW
user32
VkKeyScanA
RegisterClipboardFormatA
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SystemParametersInfoA
SetForegroundWindow
GetWindowPlacement
ShowWindowAsync
IsWindowVisible
GetWindowLongA
WaitForInputIdle
PostMessageA
GetKeyboardLayoutList
MapVirtualKeyExA
VkKeyScanExA
EnumClipboardFormats
IsCharLowerA
IsCharUpperA
GetSystemMetrics
GetAsyncKeyState
IsCharAlphaNumericA
MapVirtualKeyA
GetWindowThreadProcessId
EnumWindows
GetWindowTextA
IsIconic
IsCharAlphaA
CharLowerA
CharUpperA
CharToOemA
OemToCharA
CharToOemBuffA
OemToCharBuffA
SendMessageA
CopyIcon
MessageBeep
SetClipboardData
winspool.drv
ClosePrinter
EndDocPrinter
WritePrinter
StartDocPrinterA
OpenPrinterA
EnumPrintersA
advapi32
RegDeleteKeyA
RegCreateKeyExA
GetUserNameA
RegSetValueExA
RegDeleteValueA
GetSecurityDescriptorOwner
IsValidSid
EqualSid
GetLengthSid
CopySid
LookupAccountSidA
RegQueryValueA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SetFileSecurityA
GetFileSecurityA
RegEnumValueA
shell32
FindExecutableA
ShellExecuteExA
ExtractIconExA
ShellExecuteA
SHFileOperationA
mpr
WNetCancelConnection2A
WNetGetConnectionA
WNetGetUniversalNameA
Sections
.text Size: 596KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ