Static task
static1
Behavioral task
behavioral1
Sample
1afa900c244bee416dd948922698555f_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1afa900c244bee416dd948922698555f_JaffaCakes118
-
Size
178KB
-
MD5
1afa900c244bee416dd948922698555f
-
SHA1
10e69fb082385a78f0b608f901d5594b5dacf83d
-
SHA256
9e5a5359cc07d399078a8a7cc010c3839b6002c31c0ed2bc3df4b01498a640ea
-
SHA512
54f3e45aefb43049da6366a50ada2b720d716bfb1ebfa60457eee535c5c21576546068f6d86cf037f8d42afe4ad52e0aa8ee1b9e0c0b1cc1df2ce27c9ae08355
-
SSDEEP
3072:kHZgh6IqWaJssjUurgvVICAwhhtULZDBqNXcY8QnSh6LtY/G:kHZgh6SsjCShvlBqNX/QytY/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1afa900c244bee416dd948922698555f_JaffaCakes118
Files
-
1afa900c244bee416dd948922698555f_JaffaCakes118.exe windows:4 windows x86 arch:x86
05d26ebd88f305a700bca19e9196a68b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
IsWindow
SendMessageA
GetDlgItem
EnumChildWindows
DestroyWindow
GetWindowThreadProcessId
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
AddAtomA
VirtualQuery
InterlockedExchange
HeapSize
GetOEMCP
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
HeapDestroy
TlsGetValue
GetSystemTimeAsFileTime
GetCurrentProcess
GetEnvironmentStrings
GetCPInfo
VirtualFree
TlsFree
GetACP
SetEndOfFile
EnumResourceLanguagesA
GetLocaleInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
TerminateProcess
TlsSetValue
GetFileType
SetLastError
GetSystemInfo
HeapCreate
GetNumberFormatW
GetModuleFileNameA
FreeEnvironmentStringsA
IsBadWritePtr
WriteFile
VirtualAlloc
FreeEnvironmentStringsW
GetVersionExA
GetCurrentProcessId
GetStartupInfoA
TlsAlloc
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 89KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ