Static task
static1
Behavioral task
behavioral1
Sample
08c68373bf729420dc3747f139e3ea57_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08c68373bf729420dc3747f139e3ea57_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
08c68373bf729420dc3747f139e3ea57_JaffaCakes118
-
Size
163KB
-
MD5
08c68373bf729420dc3747f139e3ea57
-
SHA1
7918c0ee001b893f5cfb398032d0b23e3f37e49e
-
SHA256
f1169aa12c021bd332cf08d5506b584a88c40d242fe6b1a461edff747ab14395
-
SHA512
7712a4dcd3b1734ee6b83a1ecd6326693fe4727003adf9c462e8779c9669c51b15a80af3979a81d40dcf31524eeeb8d9004d146a16e875d044e7021dfc907667
-
SSDEEP
3072:J/Bp0hZnQW/R7ggys9FB6CZ7A0e3FbslAXSkWnP5xHiaAztz:Xp0hyTgy+H6M7A0qzWP5xHiaA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c68373bf729420dc3747f139e3ea57_JaffaCakes118
Files
-
08c68373bf729420dc3747f139e3ea57_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0eda911615fba974bb71d2b6e4f0075
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
iphlpapi
GetIpAddrTable
kernel32
QueryPerformanceCounter
TlsSetValue
AddAtomA
SetEndOfFile
VirtualQuery
UnhandledExceptionFilter
GetSystemInfo
FreeEnvironmentStringsW
TerminateProcess
GetModuleFileNameA
WriteFile
VirtualAlloc
HeapCreate
GetOEMCP
GetStartupInfoA
TlsGetValue
TlsAlloc
VirtualFree
GetStdHandle
GetLocaleInfoA
SetLastError
GetFileType
EnumResourceLanguagesA
SetHandleCount
GetACP
GetCurrentProcess
GetEnvironmentStringsW
TlsFree
GetDiskFreeSpaceW
GetVersionExA
IsBadWritePtr
HeapSize
FreeEnvironmentStringsA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
InterlockedExchange
GetCPInfo
HeapDestroy
SetUnhandledExceptionFilter
user32
IsWindow
CreateWindowExW
DestroyWindow
SendMessageA
GetDlgItem
EnumChildWindows
GetWindowThreadProcessId
Sections
.text Size: 85KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ