Static task
static1
Behavioral task
behavioral1
Sample
24485d5c27241481e0c96874467a1e8e_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
24485d5c27241481e0c96874467a1e8e_JaffaCakes118
-
Size
283KB
-
MD5
24485d5c27241481e0c96874467a1e8e
-
SHA1
7f9104e8f059f10fb73ba4477c4959a344097d67
-
SHA256
38f06a406ea2c30b84d8c5ecdc9713ec188f26ee9e215a1cdcd4d9b61b46b031
-
SHA512
fead27e1d068d6206a790f3567835fb62d9fa9d53f67b4fbeb72c9d1e57f9a9248950a93568fc4df9d22892192b2cd0de0ccc56c7053d2f9b44f4fa1ee69adae
-
SSDEEP
6144:896rX1EXSopNBF0BB2LceVV2LRENC/KkFCL4d6QuJVwGUFke:uWEXSopNBFow9mLRPKkALVduF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24485d5c27241481e0c96874467a1e8e_JaffaCakes118
Files
-
24485d5c27241481e0c96874467a1e8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9f9a2b9819b5bfc34e516afdeecebd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
GetDlgItem
SendMessageA
DestroyWindow
CreateWindowExW
IsWindow
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
iphlpapi
GetIpAddrTable
kernel32
GetEnvironmentStringsW
TlsSetValue
GetCurrentProcess
HeapDestroy
AddAtomA
SetLastError
GetFileType
IsBadWritePtr
SetEndOfFile
VirtualQuery
VirtualFree
GetSystemTimeAsFileTime
TlsFree
FreeEnvironmentStringsW
GetSystemInfo
SetHandleCount
GetEnvironmentStrings
TlsGetValue
TlsAlloc
GetACP
InterlockedExchange
GetStartupInfoA
EnumResourceNamesA
HeapCreate
lstrcatA
FreeEnvironmentStringsA
HeapSize
UnhandledExceptionFilter
GetStdHandle
QueryPerformanceCounter
WriteFile
VirtualAlloc
GetModuleFileNameA
TerminateProcess
GetCPInfo
GetOEMCP
GetVersionExA
GetCurrentProcessId
GetLocaleInfoA
SetUnhandledExceptionFilter
Sections
.text Size: 143KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ