Static task
static1
Behavioral task
behavioral1
Sample
c1218bcc809592de969a3a209664b56d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1218bcc809592de969a3a209664b56d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1218bcc809592de969a3a209664b56d_JaffaCakes118
-
Size
281KB
-
MD5
c1218bcc809592de969a3a209664b56d
-
SHA1
c92de6b9b4a29e75e7f3f9ac03ac97bb505e7a13
-
SHA256
bd7e05bd0aa10917221dfbd46ae724bdc1219a8b9cf0aa229c5e5e4e519c0786
-
SHA512
330ab14a9122bb1dd86a3562fe5aba3c6d74775618c68a232f499d7a1aa9bb7fca162cf9abec72a7d81b2b8fb599cbc4efe445a080527d1ed4962a0fd1184ad0
-
SSDEEP
6144:2rItDCOnuagl3h/KZVLi9adKAjgta1Bc2jA1TFdPYT:JNuaMcow1gKFyTP8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1218bcc809592de969a3a209664b56d_JaffaCakes118
Files
-
c1218bcc809592de969a3a209664b56d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7de75ea0e5e2d00827f86284515c59fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
IsWindow
SendMessageA
GetDlgItem
EnumChildWindows
CreateWindowExW
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
kernel32
UnhandledExceptionFilter
VirtualAlloc
GetOEMCP
InterlockedExchange
HeapSize
AddAtomA
SetLastError
TlsAlloc
GetCurrentProcess
HeapDestroy
GetStdHandle
GetSystemInfo
VirtualFree
GetModuleFileNameA
SetEndOfFile
GetCPInfo
HeapCreate
QueryPerformanceCounter
EnumResourceLanguagesA
TlsSetValue
IsBadWritePtr
GetEnvironmentStrings
GetLocaleInfoA
TerminateProcess
GetFileType
FreeEnvironmentStringsA
GetACP
TlsFree
GetNumberFormatW
GetVersionExA
TlsGetValue
FreeEnvironmentStringsW
GetCurrentProcessId
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualQuery
WriteFile
SetHandleCount
SetUnhandledExceptionFilter
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 143KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ