Static task
static1
Behavioral task
behavioral1
Sample
63961679c660932f3f5c83b7d223b806_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
63961679c660932f3f5c83b7d223b806_JaffaCakes118
-
Size
283KB
-
MD5
63961679c660932f3f5c83b7d223b806
-
SHA1
33bd732708c905395dc32fdf380a521c4c6b8612
-
SHA256
b3ebabafb109ee93b11123d858ed3b3603f04e1bc140438e0f6c1f0d3dabf6bd
-
SHA512
9e750b95a526c92cf4f56bb0cf9435482d227a55268c9f86d978439160843e1c04832432db8732529da4c5032ad96d023065debce531d8f552d586c1e31b1240
-
SSDEEP
6144:89vrX1EXSopNBF0BB2LceVV2LRENC/KkFCL4d6QuJVwGUFke:uREXSopNBFow9mLRPKkALVduF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63961679c660932f3f5c83b7d223b806_JaffaCakes118
Files
-
63961679c660932f3f5c83b7d223b806_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9f9a2b9819b5bfc34e516afdeecebd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
GetDlgItem
SendMessageA
DestroyWindow
CreateWindowExW
IsWindow
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
iphlpapi
GetIpAddrTable
kernel32
GetEnvironmentStringsW
TlsSetValue
GetCurrentProcess
HeapDestroy
AddAtomA
SetLastError
GetFileType
IsBadWritePtr
SetEndOfFile
VirtualQuery
VirtualFree
GetSystemTimeAsFileTime
TlsFree
FreeEnvironmentStringsW
GetSystemInfo
SetHandleCount
GetEnvironmentStrings
TlsGetValue
TlsAlloc
GetACP
InterlockedExchange
GetStartupInfoA
EnumResourceNamesA
HeapCreate
lstrcatA
FreeEnvironmentStringsA
HeapSize
UnhandledExceptionFilter
GetStdHandle
QueryPerformanceCounter
WriteFile
VirtualAlloc
GetModuleFileNameA
TerminateProcess
GetCPInfo
GetOEMCP
GetVersionExA
GetCurrentProcessId
GetLocaleInfoA
SetUnhandledExceptionFilter
Sections
.text Size: 143KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ