Static task
static1
Behavioral task
behavioral1
Sample
0b2798be48e3fe1515085faa47c407b3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b2798be48e3fe1515085faa47c407b3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b2798be48e3fe1515085faa47c407b3_JaffaCakes118
-
Size
188KB
-
MD5
0b2798be48e3fe1515085faa47c407b3
-
SHA1
bcbd46ff4a6a21552e5691fc31efef1ba8294561
-
SHA256
d84538f5873dff13a3275f7ef5fefac805ebd573c5e92197444b1e4258f35ead
-
SHA512
f2e3b071bebaff0380ba843f6fc6c924991a92de1289e724af7a12766d06a07bfdb26c577c603c34f0d9a3662ac9d58ec52900db0b812e3476c9226affd738af
-
SSDEEP
3072:4StQnGrRnDWYwA0bUumDZz+Guu4pHigKCu+j34F2bsri56FJCJ85xYlz:4StQGtDN0bMDZz+pu8bjoF4UCJ8X6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2798be48e3fe1515085faa47c407b3_JaffaCakes118
Files
-
0b2798be48e3fe1515085faa47c407b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
74e0b4a64cc97a5c1529cd1a4361795b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
CreateFiber
GetSystemInfo
HeapAlloc
HeapSize
SetUnhandledExceptionFilter
TerminateProcess
HeapReAlloc
ResumeThread
HeapDestroy
UnhandledExceptionFilter
EnumResourceNamesA
VirtualAlloc
LoadLibraryA
GetCommandLineA
IsProcessorFeaturePresent
VirtualQuery
ExitProcess
RtlUnwind
GetProcAddress
SetThreadPriority
GetLocaleInfoA
InterlockedCompareExchange
GetACP
VirtualProtect
VirtualFree
WriteFile
user32
IsWindow
GetKeyState
CallWindowProcA
IsChild
BeginPaint
SetFocus
GetClientRect
PtInRect
UnregisterClassA
IntersectRect
EndPaint
RealGetWindowClassA
RegisterClassExA
GetParent
UnionRect
GetFocus
InvalidateRect
CreateWindowExA
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ