Static task
static1
Behavioral task
behavioral1
Sample
5f9b77a472dad4f6e44ab42123508bab_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5f9b77a472dad4f6e44ab42123508bab_JaffaCakes118
-
Size
280KB
-
MD5
5f9b77a472dad4f6e44ab42123508bab
-
SHA1
4e10f2085fa14d39898c15ab2da1d261867bcbea
-
SHA256
2b227d337568fed472aa79d0228109fd42b7bce89c63e7b8e2b61dc4d4f1f628
-
SHA512
2e45113a91727def7f96e604b737cd2642ee3d1c6d1c2416387aaae1516db459895bc9105a6ec6aba845dcb8afdd10d2acd26039c329085d48f15b547b64dfe9
-
SSDEEP
6144:q8RX+9N1/Z3sr7xDP3KDdslpn7xqQ0Wt60vlOU0V/hF:/k7ZZ8rRP3AEp7xqjWPlH0pr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f9b77a472dad4f6e44ab42123508bab_JaffaCakes118
Files
-
5f9b77a472dad4f6e44ab42123508bab_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f95d1b55d3df8b149cefc2393446cde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
MulDiv
SetFilePointer
Sleep
AddAtomA
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
lstrcmpiA
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
IsBadCodePtr
GetEnvironmentStrings
GetFullPathNameA
LoadLibraryA
LeaveCriticalSection
lstrcpynA
GetCurrentThreadId
IsBadReadPtr
MultiByteToWideChar
FreeLibrary
GetStartupInfoA
GetTickCount
GetEnvironmentStringsW
lstrcmpA
GetDiskFreeSpaceA
CreateFileA
GetStringTypeW
EnumResourceNamesW
GetOEMCP
WriteFile
GetStringTypeA
FreeEnvironmentStringsW
GetLastError
LCMapStringA
GetFileAttributesA
SetStdHandle
ReadFile
lstrcatA
GetProcAddress
lstrlenA
lstrlenW
lstrcpyA
VirtualProtect
GetThreadLocale
UnhandledExceptionFilter
InitializeCriticalSection
FindFirstFileA
FlushFileBuffers
GetModuleHandleA
LCMapStringW
CloseHandle
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 139KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ