Static task
static1
Behavioral task
behavioral1
Sample
9757efbf12d5f30f55bdb68ddf42e64e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9757efbf12d5f30f55bdb68ddf42e64e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9757efbf12d5f30f55bdb68ddf42e64e_JaffaCakes118
-
Size
172KB
-
MD5
9757efbf12d5f30f55bdb68ddf42e64e
-
SHA1
23364d0d8c427dafd48848996fd55d09163fc898
-
SHA256
af17dac8b043a208d85c99fac7fc2ebe1f08b13dd1208dfd7c556c4c5b5fae07
-
SHA512
bd30a73f95ffbd656dbb5f86ebf44702c9e8787df1db22d4032d43b5ef8d394d4d4c1772ff3312d3888da0e8f23777dd67d48596554715d55b335ed4d8cd8805
-
SSDEEP
3072:OeOELD5GDV9MsK5z3zUrm768KFpILobVG3Dcsx5UFok50dYS:ObqGDq5HMz8KYcbVGYsx5U9Sd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9757efbf12d5f30f55bdb68ddf42e64e_JaffaCakes118
Files
-
9757efbf12d5f30f55bdb68ddf42e64e_JaffaCakes118.exe windows:4 windows x86 arch:x86
e65a7c991ed9658a346e18c9ff9aadab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
SetUnhandledExceptionFilter
GetTickCount
AddAtomW
GetProcessHeap
GetDiskFreeSpaceA
GetSystemTimeAsFileTime
CloseHandle
GetComputerNameA
DeviceIoControl
GetStdHandle
TlsSetValue
GlobalMemoryStatus
HeapAlloc
RtlUnwind
GetFileType
GetModuleHandleW
GetVersion
GetCurrentProcess
EnumResourceNamesA
GetCommandLineA
TlsGetValue
GetCurrentThread
TerminateProcess
HeapFree
OutputDebugStringW
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetModuleFileNameA
GetVersionExA
SetLastError
TlsFree
GetLocalTime
SetHandleCount
RaiseException
TlsAlloc
InterlockedExchange
msvcrt
?terminate@@YAXXZ
__p__commode
_vsnwprintf
_XcptFilter
__p__fmode
_exit
exit
memset
_acmdln
__getmainargs
__set_app_type
_initterm
_amsg_exit
_ismbblead
__setusermatherr
_vsnprintf
_cexit
_controlfp
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ