Static task
static1
Behavioral task
behavioral1
Sample
bfe11382e17e67e475fadff714cbcaee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfe11382e17e67e475fadff714cbcaee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfe11382e17e67e475fadff714cbcaee_JaffaCakes118
-
Size
163KB
-
MD5
bfe11382e17e67e475fadff714cbcaee
-
SHA1
8305c9a695bea43455e010650a57d3a87d7a5356
-
SHA256
2eb6f5a7ef5352c2d0b1d9aeeafaf9e03631231bbb6279bf70b476a522c8099f
-
SHA512
9e076cd9b8ba3b3d1f311655279c35d8060c898fbf04b7bdb6402bfc38c293e47d45ff91db97c7503a4b4d41351eb217a3b81b93ed6aae60be3e247ca1be390a
-
SSDEEP
3072:roCk1FJqd1/sLxBmaiMrVmdUYnwTCHvxkwmrX5jEpT3NC5myglV2m/S6pGR7Ef5F:kCMK5kTApwTCHZCuT3A4zqrRYfSXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe11382e17e67e475fadff714cbcaee_JaffaCakes118
Files
-
bfe11382e17e67e475fadff714cbcaee_JaffaCakes118.exe windows:4 windows x86 arch:x86
aefba5630e2aec1bdd8cc231095aec44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
advapi32
RegCreateKeyExW
RegEnumValueW
RegCloseKey
RegSetValueExW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyW
ole32
OleUninitialize
CoCreateInstance
OleInitialize
CoTaskMemFree
gdi32
GetDeviceCaps
SelectObject
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SetBkMode
SetBkColor
kernel32
GlobalAlloc
WriteConsoleInputVDMA
CreateProcessW
GetFileSize
ExpandEnvironmentStringsW
CreateFileW
lstrcpyA
GetFullPathNameW
GetTickCount
GlobalFree
ReadFile
lstrcmpW
WaitForSingleObject
GetProcAddress
GetModuleHandleW
RemoveDirectoryW
SetFilePointer
LoadLibraryExW
GlobalUnlock
GetSystemDirectoryW
GetModuleHandleA
FindNextFileW
GetProcessHandleCount
Sleep
GetLastError
CreateThread
DeleteFileW
CreateDirectoryW
GetDiskFreeSpaceW
GetVersionExW
EnumResourceNamesA
SetCurrentDirectoryW
WideCharToMultiByte
ExitProcess
SetFileAttributesW
GetVersion
LoadLibraryW
lstrcpynW
CompareFileTime
FreeLibrary
SetErrorMode
CloseHandle
GetModuleFileNameW
OpenProcess
GetCurrentProcess
lstrlenW
LoadLibraryA
lstrcmpiA
MulDiv
FreeEnvironmentStringsW
FindFirstFileW
FindClose
GetTempFileNameW
WriteFile
GetCommandLineW
SearchPathW
MoveFileW
CopyFileW
GetTempPathW
lstrlenA
GetPrivateProfileStringW
MultiByteToWideChar
GlobalLock
lstrcpyW
GetShortPathNameW
lstrcatW
GetFileAttributesW
lstrcmpiW
lstrcpynA
GetExitCodeProcess
WritePrivateProfileStringW
GetWindowsDirectoryW
SetFileTime
user32
LoadCursorW
DialogBoxParamW
EnableWindow
CreateDialogParamW
MessageBoxIndirectW
GetWindowRect
ExitWindowsEx
CharNextA
FindWindowExW
LoadBitmapW
SetCursor
GetMessagePos
CreatePopupMenu
SendMessageW
TrackPopupMenu
CallWindowProcW
CheckDlgButton
SetWindowTextW
GetSystemMetrics
IsWindow
SystemParametersInfoW
ShowWindow
GetDC
GetClassInfoW
PeekMessageW
GetWindowModuleFileNameW
SetWindowPos
GetSysColor
RegisterClassW
InvalidateRect
GetDlgItemTextW
EndDialog
LoadImageW
EnableMenuItem
wsprintfA
CharPrevW
IsWindowVisible
BeginPaint
SetClipboardData
wsprintfW
OpenClipboard
CloseClipboard
AppendMenuW
IsWindowEnabled
GetDlgItem
DestroyWindow
CharNextW
GetSystemMenu
SendMessageTimeoutW
SetDlgItemTextW
PostQuitMessage
DefWindowProcW
SetClassLongW
SetWindowLongW
CreateWindowExW
SetForegroundWindow
DispatchMessageW
EndPaint
GetClientRect
SetTimer
FillRect
CharUpperW
EmptyClipboard
DrawTextW
ScreenToClient
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ