Static task
static1
Behavioral task
behavioral1
Sample
0b715e8fb788abdea1f3fc3b8739a20d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b715e8fb788abdea1f3fc3b8739a20d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b715e8fb788abdea1f3fc3b8739a20d_JaffaCakes118
-
Size
169KB
-
MD5
0b715e8fb788abdea1f3fc3b8739a20d
-
SHA1
eb0b29b77778b9ca8bf971a6a15658e45c4422f9
-
SHA256
1be330346371d11828fe14720f8335ac04acd691ee028d729539caeed889f64b
-
SHA512
2bfc48e5a9116b36ee7073798c94474c2c6e0d4ddfbe33cc2514712d4c7c5783752467d369a834573477c635895b41f0b39be86f90f841e5edff2dedb8933115
-
SSDEEP
3072:+sHZKR1tneP5wr2aaJV5qzCp3FDXj+PWiL1wi7Fc7N5O/O/FZAGTe4VrcbZeky:+s0R1tneP5wrcvTBcW21O7N5yO/Tasoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b715e8fb788abdea1f3fc3b8739a20d_JaffaCakes118
Files
-
0b715e8fb788abdea1f3fc3b8739a20d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3d410eb3b53408cbee86c1f73d10b97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
GetDlgItem
SendMessageA
CreateWindowExW
EnumChildWindows
IsWindow
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
AddAtomA
InterlockedExchange
TlsFree
GetStdHandle
IsBadWritePtr
GetCurrentProcess
TlsAlloc
GetACP
QueryPerformanceCounter
SetLastError
GetLocaleInfoA
HeapCreate
SetEndOfFile
HeapDestroy
TerminateProcess
GetSystemInfo
UnhandledExceptionFilter
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
EnumResourceLanguagesA
GetEnvironmentStringsW
GetFileType
FreeEnvironmentStringsW
HeapSize
GetStartupInfoA
GetModuleFileNameA
lstrcpyW
FreeEnvironmentStringsA
TlsGetValue
GetEnvironmentStrings
VirtualQuery
TlsSetValue
GetCurrentProcessId
SetHandleCount
GetOEMCP
GetCPInfo
WriteFile
GetVersionExA
SetUnhandledExceptionFilter
Sections
.text Size: 86KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ