Static task
static1
Behavioral task
behavioral1
Sample
314acb172a48c9bcab5781d2c44b622f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
314acb172a48c9bcab5781d2c44b622f_JaffaCakes118
-
Size
283KB
-
MD5
314acb172a48c9bcab5781d2c44b622f
-
SHA1
098d0d0db34ebd56357ee338f8850c63c61d0144
-
SHA256
366cd64f75420615284d60d9bb4f5ed80d1d670b3c936e4024d73e221abc2867
-
SHA512
f5c418921d8072605618abc71356d2cd5f4bfa4e22ecf2648cf4b7f79b8665f98c0e691a7617c15e649a95f88f723782724eac6b0f2ba86cad4a20bcc1b2682d
-
SSDEEP
6144:NDVBe0IxJXxtlr+k2hGuT7iUxeKmL2v8g6Y8ha:RVBeNtlr+khuT7ir296YCa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 314acb172a48c9bcab5781d2c44b622f_JaffaCakes118
Files
-
314acb172a48c9bcab5781d2c44b622f_JaffaCakes118.exe windows:4 windows x86 arch:x86
4245d0072a6f5bbc3db640c2bff905f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
IsWindow
SendMessageA
CreateWindowExW
GetDlgItem
DestroyWindow
GetWindowThreadProcessId
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
kernel32
AddAtomA
SetLastError
QueryPerformanceCounter
SetEndOfFile
GetEnvironmentStrings
TerminateProcess
GetStdHandle
InterlockedExchange
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetModuleFileNameA
IsBadWritePtr
GetLocaleInfoA
VirtualAlloc
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualFree
VirtualQuery
HeapCreate
FreeEnvironmentStringsW
EnumResourceLanguagesA
GetSystemInfo
HeapSize
TlsSetValue
TlsAlloc
GetEnvironmentStringsW
SetHandleCount
lstrcpyW
TlsGetValue
WriteFile
HeapDestroy
GetFileType
GetACP
GetVersionExA
GetOEMCP
TlsFree
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 142KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ