Static task
static1
Behavioral task
behavioral1
Sample
bc4a269ef127d108659149b6058ac7d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bc4a269ef127d108659149b6058ac7d8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bc4a269ef127d108659149b6058ac7d8_JaffaCakes118
-
Size
348KB
-
MD5
bc4a269ef127d108659149b6058ac7d8
-
SHA1
6e92d9c37f2325a6937a3416b1084fa6cbbfa0b9
-
SHA256
d59141259753d70802bc521e85bd4226174ef73871aee39dc4d763290c33281f
-
SHA512
2baf73f8860247a6ac352742e4abed159c20ccde2cdabf5dcbe509843b821e90c149fcf9f841e35d67113561a74729239a896c546ab238f497d193dfc98ed995
-
SSDEEP
6144:9lLhAgl/XxhG1MLAkCg+3K6xW4UisBfkvR8+0Pn28U+3jRdkVNBfH:D9AgF/G1MLAkCg161Un8vR8m+3jqj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc4a269ef127d108659149b6058ac7d8_JaffaCakes118
Files
-
bc4a269ef127d108659149b6058ac7d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
f9bae9e15714094acc63941c9b054636
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetConsoleTitleA
SetEndOfFile
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
lstrcpyA
LocalFree
FileTimeToLocalFileTime
CloseHandle
GetVersionExA
GetModuleHandleA
CreateIoCompletionPort
GetSystemInfo
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
FileTimeToSystemTime
GetFileAttributesA
LoadLibraryW
MultiByteToWideChar
FormatMessageA
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
WriteFile
DebugBreak
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
GetEnvironmentStringsW
GetTickCount
SetFilePointer
GetFileSize
CreateFileA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapFree
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapValidate
IsBadReadPtr
GetModuleFileNameW
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
GetModuleFileNameA
HeapSize
HeapReAlloc
user32
WindowFromPoint
GetWindow
LoadCursorA
OpenClipboard
GetCursorPos
DefWindowProcA
ClientToScreen
CloseClipboard
GetSystemMenu
GetWindowRect
GetWindowDC
DrawIconEx
GetDlgItem
LoadIconA
GetClipboardFormatNameA
GetFocus
GetClientRect
SendMessageA
EnumClipboardFormats
GetScrollRange
GetIconInfo
DrawFocusRect
OffsetRect
GetCursorInfo
CopyIcon
CheckMenuRadioItem
MessageBoxA
GetClipboardData
gdi32
ExtEscape
DeleteDC
GetCurrentObject
EnumObjects
ExcludeClipRect
CreateDCA
SelectObject
CombineRgn
GetTextAlign
CreateRectRgn
SetTextAlign
TextOutW
MoveToEx
winspool.drv
OpenPrinterA
DeletePrinterDriverA
ClosePrinter
DeletePrinter
ole32
CoCreateInstance
uxtheme
DrawThemeBackground
traffic
TcQueryFlowA
TcQueryInterface
Sections
.text Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ