Static task
static1
Behavioral task
behavioral1
Sample
49065b2f1a7611a7f47b12c62ecc9add_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
49065b2f1a7611a7f47b12c62ecc9add_JaffaCakes118
-
Size
269KB
-
MD5
49065b2f1a7611a7f47b12c62ecc9add
-
SHA1
358dac6db141bd6427255d695ced959668bea61d
-
SHA256
836212f64a7fd1b9393154772eb18bc9c2544c391aba5921f20b5ece91e6039d
-
SHA512
b894fa94758e76fcc35c2535f7cf483116fe39d93bb169d6adedbd412a4f5c4bbb1f1c9be0a9d0599392a3a1c26587e079be8993f738519ecce9ffcb093ece41
-
SSDEEP
6144:pWFLa71DBbPzJAIwSxoa0o/EKelV3XIlAlLLX51VciOooQvL:pOa7JBPTaue7IOlL750i7tv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49065b2f1a7611a7f47b12c62ecc9add_JaffaCakes118
Files
-
49065b2f1a7611a7f47b12c62ecc9add_JaffaCakes118.exe windows:4 windows x86 arch:x86
0032396baf9026cf50191fcb12850963
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
CreateWindowExW
GetDlgItem
IsWindow
SendMessageA
EnumChildWindows
GetWindowThreadProcessId
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetSystemInfo
TerminateProcess
FreeEnvironmentStringsA
AddAtomA
GetModuleFileNameA
VirtualAlloc
InterlockedExchange
GetEnvironmentStrings
UnhandledExceptionFilter
VirtualQuery
TlsGetValue
GetSystemTimeAsFileTime
TlsAlloc
HeapDestroy
GetVersionExA
GetStartupInfoA
SetLastError
GetCurrentProcessId
WriteFile
EnumResourceLanguagesA
FreeEnvironmentStringsW
SetEndOfFile
GetCPInfo
TlsFree
GetFileType
GetDiskFreeSpaceW
GetCurrentProcess
VirtualFree
GetACP
HeapCreate
GetOEMCP
TlsSetValue
HeapSize
IsBadWritePtr
SetHandleCount
GetStdHandle
GetEnvironmentStringsW
GetLocaleInfoA
QueryPerformanceCounter
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
newdev
UpdateDriverForPlugAndPlayDevicesW
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 126KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ