Static task
static1
Behavioral task
behavioral1
Sample
341060a7b9d21c83acd53e2be93d6c7f_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
341060a7b9d21c83acd53e2be93d6c7f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
341060a7b9d21c83acd53e2be93d6c7f_JaffaCakes118
-
Size
1.2MB
-
MD5
341060a7b9d21c83acd53e2be93d6c7f
-
SHA1
9becc1a1d7c2f39ec31bf8434f507d440bea7643
-
SHA256
ad1a23dd058c08012cbbf37d20fa93c7cf91847221707c77eb72a80566d673ff
-
SHA512
923246cb15b3f22de7cff590ab4418e81231e58d5e0c061db1f3f1ab9076a6fd4071a1fe188365e5023d734996a671bfe9d304f0dd7a66f73f6d687b1eb5c7a1
-
SSDEEP
12288:VFo7837oB6M1+zaUEkPVomv4hEcnDep9op/5+oHbzWIPDPmLdQ9vSOte5NgWK9:Q4Lq+zaWoHhd6TUVHHlzKdF8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 341060a7b9d21c83acd53e2be93d6c7f_JaffaCakes118
Files
-
341060a7b9d21c83acd53e2be93d6c7f_JaffaCakes118.exe windows:5 windows x86 arch:x86
6eb939a1571a21534db19763ad39ce48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DestroyPropertySheetPage
InitCommonControlsEx
ImageList_Add
ImageList_Draw
ImageList_Replace
ImageList_AddMasked
ImageList_Remove
ImageList_Copy
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_GetIconSize
ImageList_GetImageInfo
CreateStatusWindowW
FlatSB_SetScrollInfo
FlatSB_SetScrollProp
kernel32
GetUserDefaultLCID
GetThreadLocale
LCMapStringW
CompareStringW
MultiByteToWideChar
CreateDirectoryW
GetSystemDirectoryW
TlsAlloc
MulDiv
GetFileType
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
GetLastError
GetCurrentThreadId
HeapFree
HeapAlloc
VirtualAlloc
LocalFree
GetProcAddress
FindNextFileW
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringA
LoadLibraryA
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
InitializeCriticalSection
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
TlsGetValue
SetLastError
TlsSetValue
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
crypt32
CryptStringToBinaryW
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CryptProtectData
CertGetNameStringW
CryptExportPublicKeyInfo
CertVerifyTimeValidity
CertGetPublicKeyLength
CertGetEnhancedKeyUsage
CertAddStoreToCollection
CertFreeCTLContext
CertAddCertificateContextToStore
CertAddEncodedCertificateToStore
CertFreeCRLContext
CertSetCertificateContextProperty
CertCreateCertificateContext
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptEncodeObjectEx
CryptDecodeObjectEx
CryptDecodeObject
CryptMsgOpenToDecode
oleaut32
SafeArrayGetLBound
SafeArrayAccessData
VariantClear
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromDate
VarBstrFromBool
VarBoolFromStr
VarNeg
VarNot
RegisterTypeLi
SafeArrayCreate
SysAllocStringLen
SafeArrayGetUBound
ole32
CreateStreamOnHGlobal
setupapi
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoListExW
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceW
SetupGetFieldCount
SetupGetLineCountW
SetupFindNextLine
SetupOpenInfFileW
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDevsW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiGetActualSectionToInstallW
CM_Get_DevNode_Registry_Property_ExW
CM_Get_DevNode_Status
CM_Get_Parent_Ex
CM_Locate_DevNodeW
SetupInstallFromInfSectionW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 824KB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ