Static task
static1
Behavioral task
behavioral1
Sample
b48d35e90f9b8fe7dcd3c7b6ed67f278_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b48d35e90f9b8fe7dcd3c7b6ed67f278_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b48d35e90f9b8fe7dcd3c7b6ed67f278_JaffaCakes118
-
Size
1.8MB
-
MD5
b48d35e90f9b8fe7dcd3c7b6ed67f278
-
SHA1
7d6142adeb0e2045b94d2854c41863e0fc7228ee
-
SHA256
5505fe7ec051a8eea3487fa1aecba8804add7b395ec85fedca9dfc9607c934b4
-
SHA512
43f60d2a8a3a1e719196ec93abead5421d7a5915b91d926936ebf9403326600f1a97f631268bd0e04ae6da6157ddcf698405ab7cc9eb4ac0f9c2a906438bcbb5
-
SSDEEP
49152:EMRdnBNdzGG5gq3OGuBe61uZHjnpAFV7R8bX:PGG5NeI8uVDpAj7Ro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b48d35e90f9b8fe7dcd3c7b6ed67f278_JaffaCakes118
Files
-
b48d35e90f9b8fe7dcd3c7b6ed67f278_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a4e5b08ac713929177d6f8184531649
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
newdev
UpdateDriverForPlugAndPlayDevicesW
shell32
SHGetFolderPathW
kernel32
GetVersionExA
AddAtomA
GetOEMCP
QueryPerformanceCounter
FreeEnvironmentStringsA
GetACP
GetModuleFileNameA
FreeEnvironmentStringsW
TerminateProcess
GetCurrentProcess
TlsGetValue
GetEnvironmentStrings
TlsSetValue
VirtualFree
HeapDestroy
GetCurrentProcessId
EnumResourceNamesW
IsBadWritePtr
GetSystemInfo
HeapCreate
WriteFile
SetLastError
HeapSize
TlsFree
GetCPInfo
GetLocaleInfoA
lstrcatW
GetSystemTimeAsFileTime
GetStdHandle
GetFileType
UnhandledExceptionFilter
VirtualAlloc
VirtualQuery
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
SetEndOfFile
TlsAlloc
InterlockedExchange
SetUnhandledExceptionFilter
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
user32
EnumChildWindows
IsWindow
DestroyWindow
CreateWindowExW
SendMessageA
GetDlgItem
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
Sections
.text Size: 915KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 941KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ