Static task
static1
Behavioral task
behavioral1
Sample
bfee7935d82edb5a583c9cf03fb1cfd0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfee7935d82edb5a583c9cf03fb1cfd0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfee7935d82edb5a583c9cf03fb1cfd0_JaffaCakes118
-
Size
132KB
-
MD5
bfee7935d82edb5a583c9cf03fb1cfd0
-
SHA1
f41e1330d27e98eabe51da7eab7a73b1c7f94f4c
-
SHA256
1d1c31feae821c9a6d7f625777eb911a2e925a8e078543b86a033d905a0dca2c
-
SHA512
9512142922734d65ea0cd8667113209101a694df575df8ccecd0fd6771a05b17a115e882b6c1d979c41451ab2d4a4b027bf4e141b908b3d7244530ab3e4c97e5
-
SSDEEP
3072:dvsh6j/20ChSwllVmd9bg88N852kJg3mv6/zdFQcdVfBh:5sh6zJwJZ886gs67dmcdVX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfee7935d82edb5a583c9cf03fb1cfd0_JaffaCakes118
Files
-
bfee7935d82edb5a583c9cf03fb1cfd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bd626ebe6add3ba956ed5be180f5cee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStringTypeW
GetTempFileNameA
GlobalDeleteAtom
HeapSize
IsDebuggerPresent
LoadLibraryA
SetFileAttributesA
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WritePrivateProfileStringA
user32
GetCursorPos
GetWindowLongA
GetWindowPlacement
GetWindowTextA
IsWindowEnabled
IsWindowVisible
LoadBitmapA
MessageBoxA
PeekMessageA
ReleaseDC
SetWindowTextA
gdi32
CreateDIBSection
DeleteEnhMetaFile
GetDCOrgEx
SetWindowExtEx
TextOutA
shell32
CommandLineToArgvW
DragAcceptFiles
DragQueryPoint
ExtractIconExW
SHChangeNotify
SHFileOperationA
SHGetFileInfo
SHGetFolderPathW
SHGetPathFromIDList
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetSettings
SHGetSpecialFolderPathW
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ