Static task
static1
Behavioral task
behavioral1
Sample
287faf7f9282de0a29fa77e203410bad_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
287faf7f9282de0a29fa77e203410bad_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
287faf7f9282de0a29fa77e203410bad_JaffaCakes118
-
Size
169KB
-
MD5
287faf7f9282de0a29fa77e203410bad
-
SHA1
e24755f587d2e26a53ab338df12abb0047c331a0
-
SHA256
a68558782571c4aa4c7d09c75cbc70b6966a249654fd14233ea410f8f0946a9f
-
SHA512
3183f156093f90c43f233d570a839c03d401bc00a7bef2c6941b94ead86eaf88f9b360a771fa95a7ccee1f8662b6eeb6eafd2816ce7a27d7ed219673e83eb880
-
SSDEEP
3072:LZmbrfs00fhQkH5m65IDRyCKsODyK5p3dcXGbHIefzp58yXkmhRwAQ4ckIcI/SAC:MbgT6k4fRyCLO+K3qcHIi15JlZI/SAC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287faf7f9282de0a29fa77e203410bad_JaffaCakes118
Files
-
287faf7f9282de0a29fa77e203410bad_JaffaCakes118.exe windows:4 windows x86 arch:x86
dee8e661e408138ff1367ad17366b49d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
iphlpapi
GetIpAddrTable
kernel32
InterlockedExchange
UnhandledExceptionFilter
GetOEMCP
FreeEnvironmentStringsA
AddAtomA
GetEnvironmentStrings
GetVersionExA
GetLocaleInfoA
HeapSize
GetSystemInfo
SetHandleCount
GetCurrentProcess
GetStdHandle
WriteFile
HeapDestroy
GetACP
GetCPInfo
SetLastError
EnumResourceLanguagesA
VirtualAlloc
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
TlsFree
QueryPerformanceCounter
GetCurrentProcessId
lstrcpynW
HeapCreate
GetModuleFileNameA
GetFileType
VirtualFree
TlsGetValue
TlsSetValue
TerminateProcess
IsBadWritePtr
GetStartupInfoA
VirtualQuery
TlsAlloc
SetEndOfFile
SetUnhandledExceptionFilter
user32
GetDlgItem
EnumChildWindows
SendMessageA
IsWindow
CreateWindowExW
DestroyWindow
GetWindowThreadProcessId
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 86KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ