Static task
static1
Behavioral task
behavioral1
Sample
437942e0e0dcc22ee6c0bf9e22c37da3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
437942e0e0dcc22ee6c0bf9e22c37da3_JaffaCakes118
-
Size
261KB
-
MD5
437942e0e0dcc22ee6c0bf9e22c37da3
-
SHA1
0da961528265c0b21273ff02b34c917f5d52b9e2
-
SHA256
48c99ace980fb45cae0ba728c544293579a5a3918367ccd0b89cb954db769bf2
-
SHA512
48954654d09e2f7ae29c778b7df117f7cbdec619e355843518d00cd78c084686855aeaa4c702635ff7e2dd56777068e83ca0858764ae492bb6a7c8e2a64626c0
-
SSDEEP
6144:cDSFSlaYAiOMm0neGCKv33atdVfHFvyEYEv/eyJ05b1wM2:cDS8lFAzueGr/aVfIEYceo0By
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 437942e0e0dcc22ee6c0bf9e22c37da3_JaffaCakes118
Files
-
437942e0e0dcc22ee6c0bf9e22c37da3_JaffaCakes118.exe windows:4 windows x86 arch:x86
2fda39f0ce1fcc50606807d5434011ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
IsWindow
SendMessageA
CreateWindowExW
DestroyWindow
GetDlgItem
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetACP
SetHandleCount
AddAtomA
HeapCreate
GetSystemInfo
VirtualQuery
GetEnvironmentStrings
GetFileType
GetCurrentProcess
GetCurrentProcessId
GetVersionExA
GetStdHandle
TlsAlloc
UnhandledExceptionFilter
SetLastError
GetOEMCP
TlsFree
FreeEnvironmentStringsA
TlsSetValue
HeapSize
TlsGetValue
TerminateProcess
EnumResourceNamesW
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualFree
InterlockedExchange
GetCPInfo
FreeEnvironmentStringsW
lstrcatW
SetEndOfFile
GetModuleFileNameA
GetEnvironmentStringsW
WriteFile
GetLocaleInfoA
QueryPerformanceCounter
IsBadWritePtr
HeapDestroy
VirtualAlloc
SetUnhandledExceptionFilter
shell32
SHGetFolderPathW
iphlpapi
GetIpAddrTable
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
Sections
.text Size: 128KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ