Static task
static1
Behavioral task
behavioral1
Sample
8a641c5a4504406219b8569efb3510bf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a641c5a4504406219b8569efb3510bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a641c5a4504406219b8569efb3510bf_JaffaCakes118
-
Size
283KB
-
MD5
8a641c5a4504406219b8569efb3510bf
-
SHA1
861644eaabbc5f3e53475f87f33509864e9e2f6d
-
SHA256
3557a12eddb7b0809d6b209b2a2d2d5d50bbbace5af786d8ed32e3af0f417272
-
SHA512
14985ff0ac9a7f42163173581db389b18d1f83a2db05fe59a718d39cebca27c9c84f7ca73f3cc88d27c7b7e2c4c06d53f3415731d40e6270e36eac8b93507924
-
SSDEEP
6144:89VrX1EXSopNBF0BB2LceVV2LRENC/KkFCL4d6QuJVwGUFke:uvEXSopNBFow9mLRPKkALVduF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a641c5a4504406219b8569efb3510bf_JaffaCakes118
Files
-
8a641c5a4504406219b8569efb3510bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9f9a2b9819b5bfc34e516afdeecebd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
GetDlgItem
SendMessageA
DestroyWindow
CreateWindowExW
IsWindow
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
iphlpapi
GetIpAddrTable
kernel32
GetEnvironmentStringsW
TlsSetValue
GetCurrentProcess
HeapDestroy
AddAtomA
SetLastError
GetFileType
IsBadWritePtr
SetEndOfFile
VirtualQuery
VirtualFree
GetSystemTimeAsFileTime
TlsFree
FreeEnvironmentStringsW
GetSystemInfo
SetHandleCount
GetEnvironmentStrings
TlsGetValue
TlsAlloc
GetACP
InterlockedExchange
GetStartupInfoA
EnumResourceNamesA
HeapCreate
lstrcatA
FreeEnvironmentStringsA
HeapSize
UnhandledExceptionFilter
GetStdHandle
QueryPerformanceCounter
WriteFile
VirtualAlloc
GetModuleFileNameA
TerminateProcess
GetCPInfo
GetOEMCP
GetVersionExA
GetCurrentProcessId
GetLocaleInfoA
SetUnhandledExceptionFilter
Sections
.text Size: 143KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ