Static task
static1
Behavioral task
behavioral1
Sample
bfe4f7b98dc6c3bce745d7534b710077_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfe4f7b98dc6c3bce745d7534b710077_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfe4f7b98dc6c3bce745d7534b710077_JaffaCakes118
-
Size
12KB
-
MD5
bfe4f7b98dc6c3bce745d7534b710077
-
SHA1
2f6b2989eaa5d4e6e99845cc9cd01679594c9eb4
-
SHA256
3899dc06315c17b54c7a8485570ee46d2f28137020e88ba189fb09582f006a81
-
SHA512
24b9530865630cf2f719be92c741a48108bc4d89ce60e66e4cade557d93eabd14a8ce0b8bfaa306a326caa3f517b513915c8f4178266ddd4eff8fa984ffbdc46
-
SSDEEP
192:IKDu3Eo7LQHdPRMBZPP5DzqynNXyrW+6sdjlh8tJWwkR1LVM/i8WPmWWx:ULQHdJuXeWiJh8tJrkzVM/i8WPmWW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe4f7b98dc6c3bce745d7534b710077_JaffaCakes118
Files
-
bfe4f7b98dc6c3bce745d7534b710077_JaffaCakes118.exe windows:4 windows x86 arch:x86
e9f50fb0ef76f6e87065ee6d7886cd7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
DeleteFileA
VirtualFree
ReadFile
VirtualAlloc
GetFileSize
Sleep
GetTempFileNameA
GetTempPathA
SetFilePointer
CreateProcessA
WinExec
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleHandleA
VirtualFreeEx
GetProcAddress
WriteProcessMemory
VirtualAllocEx
CreateMutexA
DisconnectNamedPipe
PeekNamedPipe
ConnectNamedPipe
CreateNamedPipeA
TerminateThread
OpenMutexA
GetShortPathNameA
CopyFileA
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ExitProcess
WaitForSingleObject
CreateEventA
SetEvent
OpenEventA
GetLastError
CreateFileA
WriteFile
OpenProcess
CloseHandle
user32
GetWindowThreadProcessId
PostMessageA
EnumWindows
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
msvcrt
_stricmp
Sections
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ