Static task
static1
Behavioral task
behavioral1
Sample
73ff229c8658bb4ac1aa9247c36aa5a4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73ff229c8658bb4ac1aa9247c36aa5a4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73ff229c8658bb4ac1aa9247c36aa5a4_JaffaCakes118
-
Size
2.9MB
-
MD5
73ff229c8658bb4ac1aa9247c36aa5a4
-
SHA1
e971b853bb6ca1ae88c678ed87e21e83eef81b92
-
SHA256
682c2d4705cb15943410a96fe684cd41216d6a467667de1a1ee8baf99df684ff
-
SHA512
342de3d8defc6c34f1bc556fadaf1c3d972c0cf78a8093f38a84a483d54a629e7351760243799e67ec78323e432b52b4164f66b38adf3b014cb92c5be5837f96
-
SSDEEP
49152:pz9k/+tk5CjWQQ+mmMmkOsuKQEN7Zdrvg3AER2sZMtbJFECkLmKHMhiFC:pYtQFmmMmJMbprvg3AEwbhJFEjLBsi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73ff229c8658bb4ac1aa9247c36aa5a4_JaffaCakes118
Files
-
73ff229c8658bb4ac1aa9247c36aa5a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f6899626012a98f676a6dd12b11e51ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
GetAtomNameW
IsDBCSLeadByte
Sleep
WaitForSingleObject
LoadLibraryW
GetTempPathA
SetEvent
GetFullPathNameA
GetTickCount
EnterCriticalSection
LoadLibraryA
EnumResourceNamesA
GetTimeZoneInformation
DeleteCriticalSection
lstrcpyA
QueryMemoryResourceNotification
FileTimeToSystemTime
GetFullPathNameW
ResetEvent
GetProcAddress
CreateThread
InitializeCriticalSection
LeaveCriticalSection
FreeLibrary
winmm
mciSendCommandA
sndPlaySoundA
setupapi
InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shlwapi
PathAddBackslashA
advapi32
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ