Static task
static1
Behavioral task
behavioral1
Sample
1689f21a297c17679364e003f174666e_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1689f21a297c17679364e003f174666e_JaffaCakes118
-
Size
269KB
-
MD5
1689f21a297c17679364e003f174666e
-
SHA1
089ebf58921b20063d7bbe825cd9dca157bf4b4b
-
SHA256
f07e40ffbd04ad62b340df0525e8b241825ebdddb84d705e822f4e2a803d94c9
-
SHA512
19e3b9ae49772dd26121d5e1982d5843efe61e2df53c4f9c4d846f772d16d7387871d343eca8dbe82b894acd4133f871bd255c3cfa6a191ea0c55761bded1939
-
SSDEEP
6144:pWFLa71gBbPzJAIwSxoa0o/EKelV3XIlAlLLX51VciOooQvL:pOa7GBPTaue7IOlL750i7tv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1689f21a297c17679364e003f174666e_JaffaCakes118
Files
-
1689f21a297c17679364e003f174666e_JaffaCakes118.exe windows:4 windows x86 arch:x86
0032396baf9026cf50191fcb12850963
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
CreateWindowExW
GetDlgItem
IsWindow
SendMessageA
EnumChildWindows
GetWindowThreadProcessId
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetSystemInfo
TerminateProcess
FreeEnvironmentStringsA
AddAtomA
GetModuleFileNameA
VirtualAlloc
InterlockedExchange
GetEnvironmentStrings
UnhandledExceptionFilter
VirtualQuery
TlsGetValue
GetSystemTimeAsFileTime
TlsAlloc
HeapDestroy
GetVersionExA
GetStartupInfoA
SetLastError
GetCurrentProcessId
WriteFile
EnumResourceLanguagesA
FreeEnvironmentStringsW
SetEndOfFile
GetCPInfo
TlsFree
GetFileType
GetDiskFreeSpaceW
GetCurrentProcess
VirtualFree
GetACP
HeapCreate
GetOEMCP
TlsSetValue
HeapSize
IsBadWritePtr
SetHandleCount
GetStdHandle
GetEnvironmentStringsW
GetLocaleInfoA
QueryPerformanceCounter
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
newdev
UpdateDriverForPlugAndPlayDevicesW
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 126KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ