Static task
static1
Behavioral task
behavioral1
Sample
bcd8871761f39198e89df811ff704635_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bcd8871761f39198e89df811ff704635_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bcd8871761f39198e89df811ff704635_JaffaCakes118
-
Size
161KB
-
MD5
bcd8871761f39198e89df811ff704635
-
SHA1
e564cec93a8c84be2863804733c958401c12df28
-
SHA256
74ae3c7bbc041639c52e298f1e0334c52ba8c1126eb0daf94fbb7bee40a831f9
-
SHA512
eaef6ad367bf56e0b88a601608814bb98bc2e0a50850e1d699cc64b79fe7ea4d6dee0ec2d2d479d8af09c3f803982cfd8d93d1a53abfa41cb45c7ea5912fca04
-
SSDEEP
3072:CygSpU342V2P3qBk5BlHAn19Bd2ceRwKd3zeBzd3An1YgCQSPH96PHNrD5o85PPK:pgh34Ek6BsBO1N2ce53zeBzJAn3ClH94
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcd8871761f39198e89df811ff704635_JaffaCakes118
Files
-
bcd8871761f39198e89df811ff704635_JaffaCakes118.exe windows:5 windows x86 arch:x86
0eb3c5acafa1481b5bf6c29197810cbd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
lstrcpyA
GetProcAddress
AreFileApisANSI
GetLastError
LoadLibraryA
GetModuleFileNameA
GlobalAlloc
CreateMutexA
lstrlenW
GetFileAttributesA
InterlockedDecrement
GetStartupInfoA
CreateProcessA
SetLastError
GlobalFree
GetCurrentProcess
ActivateActCtx
GetACP
GetOEMCP
VirtualProtect
LocalFree
GetFullPathNameA
OutputDebugStringA
lstrlenA
lstrcpynA
user32
GetDlgCtrlID
SetWindowTextA
SetForegroundWindow
DrawTextA
GetSystemMetrics
IsWindow
UpdateWindow
SendMessageA
FillRect
GetDesktopWindow
SetCapture
GetWindowRect
GetWindowTextA
TabbedTextOutA
PtInRect
GrayStringA
DefWindowProcA
EnumChildWindows
GetParent
EnableWindow
GetSystemMenu
GetKeyboardLayout
GetDoubleClickTime
GetTopWindow
IsWindowEnabled
IsZoomed
OffsetRect
ReleaseCapture
SetRect
gdi32
AngleArc
AbortDoc
RectVisible
LPtoDP
SetRectRgn
BitBlt
TextOutA
CreateFontIndirectA
DPtoLP
CreatePolygonRgn
GetTextColor
CombineRgn
Polyline
CreatePalette
CreateRectRgn
PtInRegion
GetObjectA
SetPixel
PtVisible
advapi32
LsaFreeMemory
RegSetValueExW
CryptDestroyHash
LsaClose
RegOpenKeyExW
CryptDeriveKey
RegOpenKeyExA
RegDeleteValueA
RegDeleteValueW
CryptEncrypt
RegEnumValueA
CryptAcquireContextA
LsaOpenPolicy
EqualSid
CryptReleaseContext
RegEnumValueW
RegCreateKeyExA
FreeSid
RegCreateKeyExW
CryptCreateHash
CryptDestroyKey
CryptDecrypt
RegCloseKey
RegQueryValueExW
IsTextUnicode
RegQueryValueExA
RegDeleteKeyW
RegOpenCurrentUser
RegEnumKeyW
CryptHashData
RegSetValueExA
RegOpenKeyW
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
ole32
CoInitialize
CLSIDFromProgID
StringFromCLSID
CoCreateInstance
CoTaskMemFree
CoUninitialize
comctl32
InitCommonControlsEx
_TrackMouseEvent
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
oledlg
OleUIBusyW
psapi
GetModuleBaseNameA
msvcrt
calloc
_mbscmp
__set_app_type
_CIcos
_XcptFilter
_initterm
_vsnprintf
_onexit
??1type_info@@UAE@XZ
_controlfp
__CxxFrameHandler
?terminate@@YAXXZ
__setusermatherr
free
__p__commode
_mbsicmp
__getmainargs
_strdup
__p__fmode
_setmbcp
_except_handler3
_splitpath
_adjust_fdiv
_CxxThrowException
exit
_exit
_acmdln
__dllonexit
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ