Static task
static1
Behavioral task
behavioral1
Sample
6015761fd44dfee0b63b9f1bd62149b4_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6015761fd44dfee0b63b9f1bd62149b4_JaffaCakes118
-
Size
282KB
-
MD5
6015761fd44dfee0b63b9f1bd62149b4
-
SHA1
aa6008c0a4759f53c7c66081618416c50623fab5
-
SHA256
f31709813f58eb7d76e772d484557c2ffdfcc002fa7cfe970a4783651073c1ff
-
SHA512
cc87f1b0919a8cb9f5c9aba0944178852be65de3731c8df0b466d4d012dfc4156249d1cd615c84f9180e44578466feb549c65aae9a6abc19da79abf69c3eb992
-
SSDEEP
6144:crPr9EYF57R69Um+nEY0kqk4PXzCPamiHtRNCI6X:29XF9R6ym+skK07mKX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6015761fd44dfee0b63b9f1bd62149b4_JaffaCakes118
Files
-
6015761fd44dfee0b63b9f1bd62149b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
a720bc810f6a2bc8b444571c156db966
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
VirtualAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetOEMCP
AddAtomA
GetFileType
WriteFile
TlsSetValue
GetSystemInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetACP
GetStdHandle
TlsGetValue
SetEndOfFile
VirtualFree
VirtualQuery
EnumResourceNamesA
TerminateProcess
SetLastError
GetStartupInfoA
lstrcatA
InterlockedExchange
TlsAlloc
GetEnvironmentStrings
TlsFree
GetCurrentProcess
SetHandleCount
HeapDestroy
FreeEnvironmentStringsA
GetModuleFileNameA
IsBadWritePtr
GetVersionExA
HeapCreate
GetCPInfo
GetLocaleInfoA
SetUnhandledExceptionFilter
shell32
SHGetFolderPathW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
iphlpapi
GetIpAddrTable
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
user32
CreateWindowExW
DestroyWindow
GetDlgItem
SendMessageA
EnumChildWindows
IsWindow
GetWindowThreadProcessId
Sections
.text Size: 142KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ