Static task
static1
Behavioral task
behavioral1
Sample
31b54e7e6d4351d8d99a80d30452386e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31b54e7e6d4351d8d99a80d30452386e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31b54e7e6d4351d8d99a80d30452386e_JaffaCakes118
-
Size
72KB
-
MD5
31b54e7e6d4351d8d99a80d30452386e
-
SHA1
76827b1855d6394f90a22954b0f79c67e28a4df6
-
SHA256
40d0e8f7310560b5fa8fed6cec964e4e57e2ed34198b08839bb23b9d042d866c
-
SHA512
f38ddcaf65ef59ef6900e706f65fc4dd837e9f261d514f6f56ed664a25897ae1303b61c31139e8ad03c3efb52d2152be578189a9823ad8bb5c69b3890fc3ac75
-
SSDEEP
768:P+FXLcoSU7QrWpQG0XbLmnfw53/xQgG+NupaKTYoCzKvdmgAyIfu2vQMyn:P+lcoSU7DpgLLmot7boCzKlZcfu2vS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31b54e7e6d4351d8d99a80d30452386e_JaffaCakes118
Files
-
31b54e7e6d4351d8d99a80d30452386e_JaffaCakes118.exe windows:4 windows x86 arch:x86
eb45589ba79875299e0765b50adb6fc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
lstrcatA
lstrcpyA
GetModuleFileNameA
CloseHandle
GetFileSize
CreateFileA
LocalFree
LocalAlloc
CreateThread
CreateEventA
WaitForSingleObject
SetEvent
DeviceIoControl
WaitForMultipleObjects
ReleaseMutex
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetPrivateProfileStringA
lstrlenA
GetPrivateProfileIntA
Sleep
CreateMutexA
GetLastError
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
user32
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassA
LoadCursorA
SendMessageA
GetClassNameA
FindWindowExA
CharUpperA
wsprintfA
SetTimer
KillTimer
PostMessageA
PostQuitMessage
DefWindowProcA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
winmm
mixerGetNumDevs
mixerGetID
mixerClose
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetLineInfoA
mixerSetControlDetails
mixerGetDevCapsA
mixerOpen
setupapi
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInstanceIdA
SetupDiDestroyDeviceInfoList
shlwapi
SHDeleteKeyA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE