Static task
static1
Behavioral task
behavioral1
Sample
0f5535262ee7a18404abff69f124ec9c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f5535262ee7a18404abff69f124ec9c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f5535262ee7a18404abff69f124ec9c_JaffaCakes118
-
Size
172KB
-
MD5
0f5535262ee7a18404abff69f124ec9c
-
SHA1
6a6aad5e25d50c2d072a2984aa7cd03d52b4891a
-
SHA256
1aee36130d8b1253738f56721303bc4fa4fea530e4b6b09920ec208153e25ae4
-
SHA512
1c567daf6c355c58c2fecac3ec2058265136d6f51298e64a8d4c73f8a86397bd000c73b4a9319646ca640afb9090b91ee66a8edf91fca77e133cdcf5602ea437
-
SSDEEP
3072:OxImS8Dv2HADLdKDmyp2SIep20o9Xq/6GJsTNu+Rp4NIghAmdbh:1YvaADLdwmG2SIep2J6/6GaTNDMhV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5535262ee7a18404abff69f124ec9c_JaffaCakes118
Files
-
0f5535262ee7a18404abff69f124ec9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
87f4e8abe2a2917930f677fe7ad6d105
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddBackslashA
winmm
mciSendCommandA
sndPlaySoundA
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetSystemInfo
GetStartupInfoA
AddAtomA
VirtualAlloc
TlsFree
GetStdHandle
FreeEnvironmentStringsA
GetLocaleInfoA
GetEnvironmentStringsW
GetACP
HeapSize
TlsSetValue
VirtualFree
SetLastError
GetFileType
HeapCreate
EnumResourceNamesA
TerminateProcess
GetEnvironmentStrings
TlsGetValue
TlsAlloc
IsBadStringPtrW
IsBadWritePtr
SetEndOfFile
GetModuleFileNameA
InterlockedExchange
FreeEnvironmentStringsW
GetCurrentProcess
GetVersionExA
SetHandleCount
UnhandledExceptionFilter
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ