Static task
static1
Behavioral task
behavioral1
Sample
5fe3ce7a1c8dc06a5b5a3a02f23a288c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fe3ce7a1c8dc06a5b5a3a02f23a288c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fe3ce7a1c8dc06a5b5a3a02f23a288c_JaffaCakes118
-
Size
178KB
-
MD5
5fe3ce7a1c8dc06a5b5a3a02f23a288c
-
SHA1
0f2d1d9ee1ba5207fc45687cd374b59cd81328fe
-
SHA256
250ef6a2253cf8c29336e097ab664f2a22801afddf2dacc16a1ea5ede082a589
-
SHA512
27bac755f6dd54d2a70b422f4d3fbc51dfed08d6cb9ac280698f489ba69ec1e82b36f6ff93a34703fe096b8d4468df63e720d3b07194d7160c416b47a5891891
-
SSDEEP
3072:E1V3XBZIIqwKnbL13Vi7FLFS1FpEp8MH7oDfXpj8yhUFlW9NAeg9CikJ:E1dXBZOwuL149wpm877zhUF+NAeg9E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fe3ce7a1c8dc06a5b5a3a02f23a288c_JaffaCakes118
Files
-
5fe3ce7a1c8dc06a5b5a3a02f23a288c_JaffaCakes118.exe windows:4 windows x86 arch:x86
3b62b3d142bd3cf40537afe6880e1173
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
user32
CreateWindowExW
IsWindow
DestroyWindow
GetDlgItem
EnumChildWindows
SendMessageA
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
kernel32
FreeEnvironmentStringsA
GetVersionExA
GetSystemTimeAsFileTime
HeapDestroy
GetLocaleInfoA
AddAtomA
IsBadWritePtr
QueryPerformanceCounter
TerminateProcess
SetEndOfFile
HeapSize
VirtualFree
GetACP
TlsSetValue
HeapCreate
GetStartupInfoA
GetFileType
EnumResourceLanguagesA
GetCPInfo
UnhandledExceptionFilter
VirtualQuery
GetEnvironmentStrings
InterlockedExchange
FreeEnvironmentStringsW
SetHandleCount
GetModuleFileNameA
FormatMessageW
SetLastError
GetStdHandle
GetCurrentProcessId
VirtualAlloc
GetEnvironmentStringsW
TlsGetValue
GetCurrentProcess
GetOEMCP
WriteFile
GetSystemInfo
TlsAlloc
TlsFree
SetUnhandledExceptionFilter
Sections
.text Size: 87KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ