Static task
static1
Behavioral task
behavioral1
Sample
79128f8570b35be89dc2682a99e03e22_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
79128f8570b35be89dc2682a99e03e22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
79128f8570b35be89dc2682a99e03e22_JaffaCakes118
-
Size
269KB
-
MD5
79128f8570b35be89dc2682a99e03e22
-
SHA1
0f55c5d35d8edf3139797848b08c6f70617eb7be
-
SHA256
6fa3dde98f8aced6269d5738d700caeb723bb23728bfe9e17758a1ebe671e23b
-
SHA512
c8d813b58530a9dff87be428036c2002990b3c6dbe953f9476b2e1f645e71f2d258f3362e1803cb6679e4d1a956ef5bcb591bf12f91375e60aa71f2276c9d9c0
-
SSDEEP
6144:pWFLa71qBbPzJAIwSxoa0o/EKelV3XIlAlLLX51VciOooQvL:pOa7QBPTaue7IOlL750i7tv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79128f8570b35be89dc2682a99e03e22_JaffaCakes118
Files
-
79128f8570b35be89dc2682a99e03e22_JaffaCakes118.exe windows:4 windows x86 arch:x86
0032396baf9026cf50191fcb12850963
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
CreateWindowExW
GetDlgItem
IsWindow
SendMessageA
EnumChildWindows
GetWindowThreadProcessId
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetSystemInfo
TerminateProcess
FreeEnvironmentStringsA
AddAtomA
GetModuleFileNameA
VirtualAlloc
InterlockedExchange
GetEnvironmentStrings
UnhandledExceptionFilter
VirtualQuery
TlsGetValue
GetSystemTimeAsFileTime
TlsAlloc
HeapDestroy
GetVersionExA
GetStartupInfoA
SetLastError
GetCurrentProcessId
WriteFile
EnumResourceLanguagesA
FreeEnvironmentStringsW
SetEndOfFile
GetCPInfo
TlsFree
GetFileType
GetDiskFreeSpaceW
GetCurrentProcess
VirtualFree
GetACP
HeapCreate
GetOEMCP
TlsSetValue
HeapSize
IsBadWritePtr
SetHandleCount
GetStdHandle
GetEnvironmentStringsW
GetLocaleInfoA
QueryPerformanceCounter
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
newdev
UpdateDriverForPlugAndPlayDevicesW
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 126KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ