Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_bf97b72ce4a0338088936143d596b102.exe
Resource
win10v2004-20250410-en
Behavioral task
behavioral2
Sample
JaffaCakes118_bf97b72ce4a0338088936143d596b102.exe
Resource
win11-20250410-en
General
-
Target
JaffaCakes118_bf97b72ce4a0338088936143d596b102
-
Size
206KB
-
MD5
bf97b72ce4a0338088936143d596b102
-
SHA1
399ec52a42f43b99acef865a1187619205890d1e
-
SHA256
8a2dc48857eedede0cf7e0c8c056476fb59649200ba7e71e7aa0b054efd46e72
-
SHA512
73a850c6472f7f6f62851359687f1a1171ec167e30ab5e5fb7199cf032c9ba2280f3ffd4282696445f7e08ee42f712226510cfea084ea6da5e9953a5d242ec90
-
SSDEEP
3072:pZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:Lrox9QUkEq9/nP3D/jP8Pcu65GbNwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_bf97b72ce4a0338088936143d596b102
Files
-
JaffaCakes118_bf97b72ce4a0338088936143d596b102.exe windows:4 windows x86 arch:x86
23f02a6162613533409b236d2e0bdf40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetModuleHandleA
GetSystemDirectoryW
MulDiv
CreateMutexW
FindAtomW
EnumDateFormatsW
FindResourceA
CreateSemaphoreW
GetNamedPipeInfo
RaiseException
FreeResource
ConnectNamedPipe
GlobalGetAtomNameW
InitializeCriticalSection
WaitForSingleObject
GetPriorityClass
MoveFileA
SetErrorMode
GetNumberFormatA
GetLocalTime
GetTempPathA
lstrcat
GlobalDeleteAtom
SetLocaleInfoA
EnumCalendarInfoA
WinExec
lstrcpy
GetUserDefaultLCID
SetLocaleInfoW
IsBadStringPtrA
AddAtomW
GlobalGetAtomNameA
GetDateFormatW
GetMailslotInfo
AddAtomA
SetCurrentDirectoryA
RemoveDirectoryW
SetComputerNameW
GetVersionExA
CreateNamedPipeA
GetProcAddress
lstrcmpW
ReplaceFileW
Beep
SetCalendarInfoW
SystemTimeToFileTime
ReplaceFileA
IsBadWritePtr
user32
wvsprintfW
EmptyClipboard
GetDC
MonitorFromPoint
CreatePopupMenu
WinHelpA
GetWindowLongW
GetMenuItemID
CharUpperA
SetParent
RegisterClassExW
CreateCaret
FindWindowA
UpdateWindow
DrawIcon
GetKeyState
SetWindowPos
ShowCursor
GetClassInfoW
GetActiveWindow
RegisterWindowMessageW
OffsetRect
EnableWindow
GetForegroundWindow
GetMenuItemInfoW
DefFrameProcW
LoadMenuW
gdi32
EnumMetaFile
CreateBitmap
DeleteMetaFile
SetDIBColorTable
GetAspectRatioFilterEx
SetWindowExtEx
ExtTextOutW
SetTextColor
GetClipBox
CreateEnhMetaFileW
EndPath
CreateDIBitmap
GetTextExtentPointA
advapi32
RegFlushKey
RegOpenKeyExW
RegOpenKeyExW
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
version
VerFindFileA
VerLanguageNameW
winmm
mciDriverNotify
midiInGetDevCapsA
timeGetTime
midiOutCachePatches
midiOutReset
Sections
.ZkOK Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.A Size: 2KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Lg Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.c Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bbrdqv Size: 4KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ