Static task
static1
Behavioral task
behavioral1
Sample
7901c092ff9df2b1a8584d9d3fdc774e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7901c092ff9df2b1a8584d9d3fdc774e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7901c092ff9df2b1a8584d9d3fdc774e_JaffaCakes118
-
Size
282KB
-
MD5
7901c092ff9df2b1a8584d9d3fdc774e
-
SHA1
d2d8b48292cf761083191b2a426fc9926c084307
-
SHA256
d0e337ab04aa61fb5fa78ffb2895afad1269f72dfa3a202cf3e4e75df0e5605e
-
SHA512
2c3071c7e7e5e26d6cf625ee90f696d608af08c3c9a156cbae7962c4bb242414cbd8cb740d2aff37f61ee74560582fd5095cd26bf986d78ad2d7708b88ece63b
-
SSDEEP
6144:FRI6xdsidVyXIcM+gs6LF5JiELIXv/8IEz+ej04:FRI4tdVy4nLFP9Uf0IEHz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7901c092ff9df2b1a8584d9d3fdc774e_JaffaCakes118
Files
-
7901c092ff9df2b1a8584d9d3fdc774e_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c3839de035298cd69ca49f6c53819d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
iphlpapi
GetIpAddrTable
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetStdHandle
SetHandleCount
VirtualFree
WriteFile
GetLocaleInfoA
TlsGetValue
AddAtomA
SetEndOfFile
SetLastError
TlsSetValue
TerminateProcess
TlsFree
HeapCreate
GetStartupInfoA
HeapDestroy
GetACP
HeapSize
GetFileType
EnumResourceLanguagesA
VirtualQuery
GetOEMCP
TlsAlloc
GetCurrentProcess
GetVersionExA
GetSystemTimeAsFileTime
lstrcpynW
GetEnvironmentStringsW
GetEnvironmentStrings
VirtualAlloc
GetCurrentProcessId
FreeEnvironmentStringsW
FreeEnvironmentStringsA
QueryPerformanceCounter
UnhandledExceptionFilter
GetModuleFileNameA
InterlockedExchange
GetCPInfo
GetSystemInfo
IsBadWritePtr
SetUnhandledExceptionFilter
user32
IsWindow
GetDlgItem
SendMessageA
EnumChildWindows
CreateWindowExW
DestroyWindow
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 141KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ