Static task
static1
Behavioral task
behavioral1
Sample
6009e88b2aff25bd25c51dc627cc11d4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6009e88b2aff25bd25c51dc627cc11d4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6009e88b2aff25bd25c51dc627cc11d4_JaffaCakes118
-
Size
186KB
-
MD5
6009e88b2aff25bd25c51dc627cc11d4
-
SHA1
1b92431bce72c0b7bff86b0f79bbdcab3b2785f0
-
SHA256
fd5b6fa6ede0464cdc7c304d4ef5ba4af0d640f06e87b0bd4163da11a453388c
-
SHA512
8490e12ba885be8538187aeaae1e8fad95884ec12e46884f19bf4264154076b122b213b19ff3c92d41a3baef617fb603495092451366617d62b2165ec520b133
-
SSDEEP
3072:xARe5XoQbB29lWcXFVt+zfitYFAHgZZ8gOvM9osz8wDwVVdSh+2u6bKUXOrA:+Re5XNkDFVdgZZ8gOvUCi6dh2B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6009e88b2aff25bd25c51dc627cc11d4_JaffaCakes118
Files
-
6009e88b2aff25bd25c51dc627cc11d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
da6f42502f0c630244e05196f294be00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
kernel32
GetLocaleInfoA
GetCPInfo
HeapCreate
TlsGetValue
AddAtomA
GetCurrentProcess
GetSystemTimeAsFileTime
SetEndOfFile
HeapSize
TlsFree
VirtualQuery
GetStartupInfoA
GetSystemInfo
GetEnvironmentStrings
TerminateProcess
InterlockedExchange
IsBadWritePtr
SetHandleCount
GetFileType
GetACP
EnumResourceLanguagesA
GetVersionExA
GetModuleFileNameA
FreeEnvironmentStringsA
GetOEMCP
UnhandledExceptionFilter
GetStdHandle
GetEnvironmentStringsW
WriteFile
lstrcpynW
SetLastError
HeapDestroy
GetCurrentProcessId
VirtualFree
VirtualAlloc
TlsSetValue
FreeEnvironmentStringsW
TlsAlloc
QueryPerformanceCounter
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
user32
CreateWindowExW
EnumChildWindows
DestroyWindow
GetDlgItem
SendMessageA
IsWindow
GetWindowThreadProcessId
Sections
.text Size: 99KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ