Static task
static1
Behavioral task
behavioral1
Sample
ba3f8afed9cc072b2c3307a923bbe25c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba3f8afed9cc072b2c3307a923bbe25c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba3f8afed9cc072b2c3307a923bbe25c_JaffaCakes118
-
Size
280KB
-
MD5
ba3f8afed9cc072b2c3307a923bbe25c
-
SHA1
37db8b43f78e614cfd5c6e52ec1cd06cdc3b3f59
-
SHA256
6e32e0adc29cceb4f73d28c3e8d31e9ceca1fc43dfd10bec431bdc043263d2a6
-
SHA512
1127984267868323419c6dee83318198026dba23d18e883841a08c27bde16cf95abec9d24e33599b55ef3da6babf6b30c9f2721b3008f17fdb5de259b1085211
-
SSDEEP
6144:q8RX+9g1/Z3sr7xDP3KDdslpn7xqQ0Wt60vlOU0V/hF:/kaZZ8rRP3AEp7xqjWPlH0pr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba3f8afed9cc072b2c3307a923bbe25c_JaffaCakes118
Files
-
ba3f8afed9cc072b2c3307a923bbe25c_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f95d1b55d3df8b149cefc2393446cde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
MulDiv
SetFilePointer
Sleep
AddAtomA
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
lstrcmpiA
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
IsBadCodePtr
GetEnvironmentStrings
GetFullPathNameA
LoadLibraryA
LeaveCriticalSection
lstrcpynA
GetCurrentThreadId
IsBadReadPtr
MultiByteToWideChar
FreeLibrary
GetStartupInfoA
GetTickCount
GetEnvironmentStringsW
lstrcmpA
GetDiskFreeSpaceA
CreateFileA
GetStringTypeW
EnumResourceNamesW
GetOEMCP
WriteFile
GetStringTypeA
FreeEnvironmentStringsW
GetLastError
LCMapStringA
GetFileAttributesA
SetStdHandle
ReadFile
lstrcatA
GetProcAddress
lstrlenA
lstrlenW
lstrcpyA
VirtualProtect
GetThreadLocale
UnhandledExceptionFilter
InitializeCriticalSection
FindFirstFileA
FlushFileBuffers
GetModuleHandleA
LCMapStringW
CloseHandle
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 139KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ