Static task
static1
Behavioral task
behavioral1
Sample
6a9099fff1e9df0fa6f9ea1f03e5057a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a9099fff1e9df0fa6f9ea1f03e5057a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a9099fff1e9df0fa6f9ea1f03e5057a_JaffaCakes118
-
Size
280KB
-
MD5
6a9099fff1e9df0fa6f9ea1f03e5057a
-
SHA1
2aa4c45e47df98a615a99730e0221dd333de13b6
-
SHA256
7e463c1b9f30f3a0eec8295102a8eff22b6cab18296436c452854f87c330b054
-
SHA512
befc1c30667a16d00a3acd6a9c33954498d64da5ad5fb4aa686bfe10cbc3448044d705eccf42a90f44167bc93cbddd1b719177d713db9d1c1f40fc3e2c503348
-
SSDEEP
6144:q8RX+9Z1/Z3sr7xDP3KDdslpn7xqQ0Wt60vlOU0V/hF:/kDZZ8rRP3AEp7xqjWPlH0pr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a9099fff1e9df0fa6f9ea1f03e5057a_JaffaCakes118
Files
-
6a9099fff1e9df0fa6f9ea1f03e5057a_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f95d1b55d3df8b149cefc2393446cde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
MulDiv
SetFilePointer
Sleep
AddAtomA
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
lstrcmpiA
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
IsBadCodePtr
GetEnvironmentStrings
GetFullPathNameA
LoadLibraryA
LeaveCriticalSection
lstrcpynA
GetCurrentThreadId
IsBadReadPtr
MultiByteToWideChar
FreeLibrary
GetStartupInfoA
GetTickCount
GetEnvironmentStringsW
lstrcmpA
GetDiskFreeSpaceA
CreateFileA
GetStringTypeW
EnumResourceNamesW
GetOEMCP
WriteFile
GetStringTypeA
FreeEnvironmentStringsW
GetLastError
LCMapStringA
GetFileAttributesA
SetStdHandle
ReadFile
lstrcatA
GetProcAddress
lstrlenA
lstrlenW
lstrcpyA
VirtualProtect
GetThreadLocale
UnhandledExceptionFilter
InitializeCriticalSection
FindFirstFileA
FlushFileBuffers
GetModuleHandleA
LCMapStringW
CloseHandle
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 139KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ