Static task
static1
Behavioral task
behavioral1
Sample
bddc0b27e3dd83e10d59e58ff6bf4c88_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bddc0b27e3dd83e10d59e58ff6bf4c88_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bddc0b27e3dd83e10d59e58ff6bf4c88_JaffaCakes118
-
Size
241KB
-
MD5
bddc0b27e3dd83e10d59e58ff6bf4c88
-
SHA1
72b5f6e1fabb8c69331cad3ffc7c9ba23937dd73
-
SHA256
fccfceee8847e3348ffd8b3968649c71cca6f7789864f18349fe1d662a781b07
-
SHA512
6b919789ef7baa62eb9491060055b585d2ac8df8b2fdf1b3bb93ed31ae4d065751f5e1b8e66744dc763afcec774ef760fda8a28ad1eb2cf5fae96643756650db
-
SSDEEP
6144:DFUl8v91MKou+h2rJiJ+DJLUE1mGVqZ9e/DLq+Sm+:Da8QKo3+pJLUE5sUvY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bddc0b27e3dd83e10d59e58ff6bf4c88_JaffaCakes118
Files
-
bddc0b27e3dd83e10d59e58ff6bf4c88_JaffaCakes118.exe windows:4 windows x86 arch:x86
43636eb298d775c35e4572eafd2e5787
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapFree
GetModuleHandleW
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
WideCharToMultiByte
RtlUnwind
HeapAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
SetFilePointer
IsProcessorFeaturePresent
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
LoadLibraryA
GetProcAddress
riched20
CreateTextServices
ufat
Recover
ChkdskEx
FormatEx
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.u Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TCVz Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.AYOo Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 213KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sHZhz Size: 512B - Virtual size: 747B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WpgokE Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ