Static task
static1
Behavioral task
behavioral1
Sample
66178e7dbe6df99553dce1c0ea6a00d0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
66178e7dbe6df99553dce1c0ea6a00d0_JaffaCakes118
-
Size
280KB
-
MD5
66178e7dbe6df99553dce1c0ea6a00d0
-
SHA1
bd97b3346b9512821712a818071d127a422d8d1c
-
SHA256
f113215be8edeb6d78cb83096e03bba0f6827afe1ffefd6f04e89c15b52c1769
-
SHA512
bbb3523016faf1090766e1a769c7c62335ecf05f3225917945a9fa6a8493225c197197a3036f9856603e052d9ccf74d71fa48fb82513a063c55ef3d3395cbe36
-
SSDEEP
6144:9O4W/2sExJVq7v/dWM/S6nQAIIiC7TSutvf9Tm5tb:U5Ek7v/73EK6u1VCD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66178e7dbe6df99553dce1c0ea6a00d0_JaffaCakes118
Files
-
66178e7dbe6df99553dce1c0ea6a00d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f5ab28e25afb770b23e560d9f4d6a03f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZClose
LZCopy
LZOpenFileA
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
advapi32
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegCloseKey
kernel32
GetACP
IsBadReadPtr
GetStringTypeA
WideCharToMultiByte
AddAtomW
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsA
HeapSize
SetUnhandledExceptionFilter
VirtualProtect
LCMapStringA
GetCPInfo
SetStdHandle
FlushFileBuffers
GetEnvironmentStrings
GetCurrentProcess
LCMapStringW
GetLocaleInfoA
TlsGetValue
GetStdHandle
GetFileType
GetThreadLocale
GetModuleFileNameA
EnumResourceNamesA
SetFilePointer
GetFullPathNameA
GetOEMCP
FreeEnvironmentStringsW
CreateFileA
WriteFileGather
GetStringTypeW
GetVersionExA
GetFileAttributesA
WriteFile
ReadFile
TlsSetValue
GetStartupInfoA
FindFirstFileA
IsBadCodePtr
TerminateProcess
SetHandleCount
GetDiskFreeSpaceA
Sections
.text Size: 149KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ