Static task
static1
Behavioral task
behavioral1
Sample
4d51aa3f7c333332cb08d440b942f2c2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4d51aa3f7c333332cb08d440b942f2c2_JaffaCakes118
-
Size
283KB
-
MD5
4d51aa3f7c333332cb08d440b942f2c2
-
SHA1
60afe4a6110725f9e5ac0d6af1b5c93beb033c66
-
SHA256
cd1faf4febcfd84264e40c05897c1f22cab7e781f4dd0acfc5f8e4789fb91a1c
-
SHA512
dc6742fc010b0c4459ca32ec2ca13e3dd6a260b49414379811893fcf0f7a8733a27359e654093780787141dbf98fc60338ac1f003ca3e353ff989399ce6921fe
-
SSDEEP
6144:7yBZvQ6xuIO/taCnq0A8RPAAiwv1MSAAI0R/WPa3YdX9vHj4Si:2BZvrQIO/tS3Wiwv1MRAI0pWPaIBxDpi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d51aa3f7c333332cb08d440b942f2c2_JaffaCakes118
Files
-
4d51aa3f7c333332cb08d440b942f2c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
bdfdd122e81227bb9996ecd0c4f9e51e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetIpAddrTable
user32
CreateWindowExW
DestroyWindow
GetDlgItem
EnumChildWindows
IsWindow
SendMessageA
GetWindowThreadProcessId
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
kernel32
VirtualFree
AddAtomA
VirtualQuery
SetLastError
GetStdHandle
GetSystemInfo
QueryPerformanceCounter
TlsFree
GetModuleFileNameA
HeapDestroy
UnhandledExceptionFilter
InterlockedExchange
GetVersionExA
GetEnvironmentStrings
GetOEMCP
HeapCreate
IsBadWritePtr
GetLocaleInfoA
EnumResourceLanguagesA
TlsSetValue
FreeEnvironmentStringsA
HeapSize
SetEndOfFile
VirtualAlloc
WriteFile
SetHandleCount
TerminateProcess
GetEnvironmentStringsW
lstrcpynW
TlsGetValue
GetCurrentProcess
GetStartupInfoA
GetSystemTimeAsFileTime
GetCPInfo
GetFileType
GetACP
FreeEnvironmentStringsW
TlsAlloc
GetCurrentProcessId
SetUnhandledExceptionFilter
Sections
.text Size: 144KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ