Static task
static1
Behavioral task
behavioral1
Sample
7863bb0cb2a44028fc9b44a8d7f6fd40_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7863bb0cb2a44028fc9b44a8d7f6fd40_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7863bb0cb2a44028fc9b44a8d7f6fd40_JaffaCakes118
-
Size
285KB
-
MD5
7863bb0cb2a44028fc9b44a8d7f6fd40
-
SHA1
cb803af4ce1cf5c4e4ae0b5c684b1a596f3cc893
-
SHA256
8e34c168fa696c731c4f8fddf2aa275aac691cbe13db0c1b208784e57f609e06
-
SHA512
49fbaac83b8d0173576404ae62e6ecd4fd0fe08b114153ecd997610a8c3a562a9a30d14981226874112ab0c50e70fb76acf0700a9029395f8166477c9b7799f8
-
SSDEEP
6144:7pB4VKtQ0otLvnko+XxoSb2xBliiyNgccAOFAIgcAxlHWC:tn8nTu3mmiyGcgLl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7863bb0cb2a44028fc9b44a8d7f6fd40_JaffaCakes118
Files
-
7863bb0cb2a44028fc9b44a8d7f6fd40_JaffaCakes118.exe windows:4 windows x86 arch:x86
7341d0da13c2d01b079092548a15034a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetIpAddrTable
user32
SendMessageA
CreateWindowExW
EnumChildWindows
DestroyWindow
IsWindow
GetDlgItem
GetWindowThreadProcessId
shell32
SHGetFolderPathW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
newdev
UpdateDriverForPlugAndPlayDevicesW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
FreeEnvironmentStringsW
TlsAlloc
GetCPInfo
AddAtomA
GetVersionExA
SetEndOfFile
GetStartupInfoA
SetLastError
HeapCreate
InterlockedExchange
TlsSetValue
GetEnvironmentStringsW
GetSystemInfo
GetFileType
GetCurrentProcess
VirtualQuery
HeapDestroy
HeapSize
GetStdHandle
EnumResourceNamesA
GetLocaleInfoA
SetHandleCount
WriteFile
lstrcatA
GetEnvironmentStrings
GetACP
GetOEMCP
GetModuleFileNameA
IsBadWritePtr
GetCurrentProcessId
VirtualAlloc
QueryPerformanceCounter
VirtualFree
TerminateProcess
UnhandledExceptionFilter
TlsFree
GetSystemTimeAsFileTime
TlsGetValue
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
Sections
.text Size: 153KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ