Static task
static1
Behavioral task
behavioral1
Sample
c757537cd71ad6c2ec179a4c1208c4f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c757537cd71ad6c2ec179a4c1208c4f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c757537cd71ad6c2ec179a4c1208c4f7_JaffaCakes118
-
Size
281KB
-
MD5
c757537cd71ad6c2ec179a4c1208c4f7
-
SHA1
fac7fb9a514a8d719b185ab78d26d3a5b490bd51
-
SHA256
8c725a7ea6d28493206d8f29f8f16b2ae4f0ba618d60c379a9e5ec2caeba2e64
-
SHA512
68cc4e7007eb5e9725d00d6c701c450d1725e5bd2a4b5fb5be3515c28f17d84f1d8c8d8221573ea9e7692015c258929613b5f430cf76239bbfcba54cd4084fc2
-
SSDEEP
6144:+u6tz378LjeuIEPg7DRGqMl0T6ok6p/tJBmHe7Zc:aB2cnRGqMyTzTJBm+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c757537cd71ad6c2ec179a4c1208c4f7_JaffaCakes118
Files
-
c757537cd71ad6c2ec179a4c1208c4f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
6b1f5584df0383bfb54a8c6ff0e85be6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
lstrcmpA
GetStartupInfoA
GetLastError
FreeEnvironmentStringsW
AddAtomA
GetCurrentThreadId
LCMapStringW
CreateFileA
WriteFile
GetModuleHandleA
lstrcpynA
lstrcatA
WideCharToMultiByte
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetEnvironmentStrings
FindFirstFileA
GetStringTypeW
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
GetThreadLocale
EnumResourceNamesW
SetStdHandle
lstrlenA
FlushFileBuffers
lstrcmpiA
SetUnhandledExceptionFilter
IsBadReadPtr
GetDiskFreeSpaceA
LoadLibraryA
LCMapStringA
SetFilePointer
IsBadCodePtr
GetFileAttributesA
EnterCriticalSection
FreeEnvironmentStringsA
DeleteCriticalSection
GetFullPathNameA
lstrlenW
GetTickCount
GetStringTypeA
VirtualProtect
FreeLibrary
lstrcpyA
Sleep
GetEnvironmentStringsW
MulDiv
ReadFile
GetProcAddress
CloseHandle
RaiseException
Sections
.text Size: 139KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ