Static task
static1
Behavioral task
behavioral1
Sample
8615f4e9e718600b376916b574484e85_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8615f4e9e718600b376916b574484e85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8615f4e9e718600b376916b574484e85_JaffaCakes118
-
Size
282KB
-
MD5
8615f4e9e718600b376916b574484e85
-
SHA1
2f46ba27a87ad576250fd79a0563920628ce2fda
-
SHA256
86fc560647b63ba0e09b3a2ed75a5a718400859e8d1356960386ad809cbaaefa
-
SHA512
9f2435ab605cc146198fb591c4877fb9fdcae51d3e1c133a76eea80735fd70abe021a63c3f1a9c34e0df68bd449d2661429efc7bb3b100f47f0f866475a43e8c
-
SSDEEP
6144:crPrdEYF57R69Um+nEY0kqk4PXzCPamiHtRNCI6X:2dXF9R6ym+skK07mKX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8615f4e9e718600b376916b574484e85_JaffaCakes118
Files
-
8615f4e9e718600b376916b574484e85_JaffaCakes118.exe windows:4 windows x86 arch:x86
a720bc810f6a2bc8b444571c156db966
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
VirtualAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetOEMCP
AddAtomA
GetFileType
WriteFile
TlsSetValue
GetSystemInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetACP
GetStdHandle
TlsGetValue
SetEndOfFile
VirtualFree
VirtualQuery
EnumResourceNamesA
TerminateProcess
SetLastError
GetStartupInfoA
lstrcatA
InterlockedExchange
TlsAlloc
GetEnvironmentStrings
TlsFree
GetCurrentProcess
SetHandleCount
HeapDestroy
FreeEnvironmentStringsA
GetModuleFileNameA
IsBadWritePtr
GetVersionExA
HeapCreate
GetCPInfo
GetLocaleInfoA
SetUnhandledExceptionFilter
shell32
SHGetFolderPathW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
iphlpapi
GetIpAddrTable
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
user32
CreateWindowExW
DestroyWindow
GetDlgItem
SendMessageA
EnumChildWindows
IsWindow
GetWindowThreadProcessId
Sections
.text Size: 142KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ