Static task
static1
Behavioral task
behavioral1
Sample
3c1e970115a1f26c77e65e2b53407e0d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3c1e970115a1f26c77e65e2b53407e0d_JaffaCakes118
-
Size
284KB
-
MD5
3c1e970115a1f26c77e65e2b53407e0d
-
SHA1
a00610bfbabc6b0328f35927e7bf8418115c7d49
-
SHA256
add664feac25ee28315f3c7adfbc59c3c7d25d4718c233853d7ec4421c7b0c4c
-
SHA512
5905c32ed45753a45802195f1b48313c4ced8addc8745ee1c546a44f8314c26bfbc6ac95a978a89dc081c2f42e7839808af143d165cc89d59756c27717af1e85
-
SSDEEP
6144:xlkEVgZ4gj4CN7tCLr1FpPqAb+ozf85VB1SaJ6Kh1wW/4VpGomQE:xlkEVbE8TpzNzf85VSuHhqs4VuQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c1e970115a1f26c77e65e2b53407e0d_JaffaCakes118
Files
-
3c1e970115a1f26c77e65e2b53407e0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b10ef2b434471e3086df070e008dbc9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
GetDlgItem
SendMessageA
EnumChildWindows
IsWindow
CreateWindowExW
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
newdev
UpdateDriverForPlugAndPlayDevicesW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
AddAtomA
HeapCreate
HeapSize
GetFileType
InterlockedExchange
GetLocaleInfoA
TlsGetValue
WriteFile
GetVersionExA
HeapDestroy
GetSystemInfo
GetCurrentProcess
VirtualFree
VirtualAlloc
FreeEnvironmentStringsW
GetStartupInfoA
QueryPerformanceCounter
GetOEMCP
TerminateProcess
GetCPInfo
GetEnvironmentStrings
EnumResourceLanguagesA
GetACP
TlsAlloc
lstrcpyW
SetLastError
VirtualQuery
SetHandleCount
GetEnvironmentStringsW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsSetValue
IsBadWritePtr
TlsFree
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetEndOfFile
SetUnhandledExceptionFilter
Sections
.text Size: 152KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ