Static task
static1
Behavioral task
behavioral1
Sample
3aa6cee3598cbf70f8f099942371a99e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3aa6cee3598cbf70f8f099942371a99e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3aa6cee3598cbf70f8f099942371a99e_JaffaCakes118
-
Size
329KB
-
MD5
3aa6cee3598cbf70f8f099942371a99e
-
SHA1
9cb136ce456bc29a2644fe7a914259409b3e9ff5
-
SHA256
aca8d79131bdb39c3df9bd6c193688198d5f10cee96145b00e83b6ae501dd0b4
-
SHA512
1bf8f5e84c22883163a17b29f11bc7a9d058e7c03312c1f107e61e91027cffc0c8e6671abdaaaf8d48b6d182b76c4b232f21dffaa49946f3a63308ba285599e3
-
SSDEEP
6144:68IiSwWUXI8fOFQkgQCn8AuUINtD2J1k2Ftkk2GfghQ9MwzOo2zU1NM4:TKwWUXIW5k48AiNt6Dk2uxhQ9Mwzn2gN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aa6cee3598cbf70f8f099942371a99e_JaffaCakes118
Files
-
3aa6cee3598cbf70f8f099942371a99e_JaffaCakes118.exe windows:9 windows x86 arch:x86
311ee5bac2342a6e4b3cb22c2049082b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
midiStreamStop
mixerGetLineInfoW
mixerGetDevCapsA
mmsystemGetVersion
DefDriverProc
mciLoadCommandResource
midiStreamOpen
midiInGetErrorTextW
joy32Message
sndPlaySoundW
mmioOpenA
PlaySoundA
mciExecute
waveOutGetPitch
mixerGetNumDevs
mmioCreateChunk
midiConnect
mmioRenameA
auxSetVolume
mixerGetControlDetailsW
waveInStart
mmioAdvance
midiDisconnect
waveInGetID
mmioDescend
midiInOpen
mixerOpen
mxd32Message
OpenDriver
mciGetErrorStringA
waveOutClose
mciDriverYield
midiOutUnprepareHeader
mmioClose
joyConfigChanged
midiInGetErrorTextA
midiOutGetDevCapsA
waveInGetDevCapsA
CloseDriver
waveOutSetPitch
SendDriverMessage
mmioOpenW
joyGetThreshold
mmioWrite
mixerGetLineControlsA
waveOutSetPlaybackRate
midiInPrepareHeader
midiInMessage
waveOutGetDevCapsW
mciGetDeviceIDW
mixerGetLineControlsW
NotifyCallbackData
waveInStop
midiOutMessage
midiOutLongMsg
mixerClose
GetDriverModuleHandle
midiInGetNumDevs
midiInStart
mod32Message
mmDrvInstall
waveInPrepareHeader
mmioGetInfo
waveInGetErrorTextA
timeKillEvent
tid32Message
wod32Message
mmioSetBuffer
midiOutPrepareHeader
waveInGetNumDevs
waveOutGetPlaybackRate
kernel32
FindNextFileW
SystemTimeToTzSpecificLocalTime
LocalAlloc
CloseHandle
VerSetConditionMask
CreateEventW
GetExitCodeThread
HeapFree
HeapAlloc
GetNumberFormatW
VirtualFree
GetVersionExA
FormatMessageW
GetPrivateProfileStringW
GetLocalTime
DeviceIoControl
CreateProcessW
SetFilePointer
GetPriorityClass
EraseTape
SetFileTime
ExitThread
GetComputerNameW
GetVolumeInformationW
InitializeCriticalSection
ReleaseMutex
SetPriorityClass
FindClose
CreateFileW
SetEvent
GetDriveTypeW
LocalFileTimeToFileTime
SetErrorMode
CloseHandle
DeleteFileW
DeleteCriticalSection
FindNextVolumeMountPointW
LeaveCriticalSection
UnhandledExceptionFilter
FindFirstFileW
CreateMutexW
GetDiskFreeSpaceExW
GetWindowsDirectoryW
LocalFree
BackupSeek
GetLastError
ReadFile
GlobalFree
GetSystemDirectoryW
FileTimeToSystemTime
GetCurrentDirectoryW
GetDateFormatW
GetCurrentThread
VirtualAlloc
EnterCriticalSection
TerminateThread
GetProcAddress
GetTickCount
SetTapePosition
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ