Static task
static1
Behavioral task
behavioral1
Sample
bfd829b35ce5f1df8d67c36f8a4f3e48_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bfd829b35ce5f1df8d67c36f8a4f3e48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfd829b35ce5f1df8d67c36f8a4f3e48_JaffaCakes118
-
Size
224KB
-
MD5
bfd829b35ce5f1df8d67c36f8a4f3e48
-
SHA1
33526b3a35c139768a2915f2cc72657fd037c2eb
-
SHA256
1806d0de3509b22074ca4aa5730f40c3ef73681ce9c7f3eeef77ec3d42d6dad0
-
SHA512
034ac37ce2e4879761feef972b9d5b097babcf3d1e02b9a335e74e1d6876e5de1dafcbfa24cc97f721bcc601d51e7bd018130d4dac124072102d878e726f252c
-
SSDEEP
1536:Yfw2EsnQ40Lq97LQcqR3uZUUJUJm5hd10Ky+oNPAv3ijieKcIWqDoqGwBf+:cBndQvXURhd1jy5pA/6T8fDooW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfd829b35ce5f1df8d67c36f8a4f3e48_JaffaCakes118
Files
-
bfd829b35ce5f1df8d67c36f8a4f3e48_JaffaCakes118.exe windows:4 windows x86 arch:x86
f2c976c2a5b1ae0b49103388fbc4d962
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
IsBadWritePtr
IsBadReadPtr
HeapValidate
SetStdHandle
FlushFileBuffers
SetEndOfFile
SetUnhandledExceptionFilter
IsBadCodePtr
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ