Static task
static1
Behavioral task
behavioral1
Sample
d02934288a0347468c3855ab277aeff8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d02934288a0347468c3855ab277aeff8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d02934288a0347468c3855ab277aeff8_JaffaCakes118
-
Size
169KB
-
MD5
d02934288a0347468c3855ab277aeff8
-
SHA1
cc0f6b284104abd062d09c800fe9a9981a8be8a9
-
SHA256
661af9b8d1ad3ab487f66239695a23444bc0099f8fdc32ce933c2822c784eb9c
-
SHA512
300a383df8286dcb93f51d5b1638b9b41c03a57a622a3ddf5574d0c14989be9854c69c85cec0673dab27915910f07dc3e9fdeb883a2f187ae50bfa29dcf3b590
-
SSDEEP
3072:+0IPbWK3fZV4PnHeaMYEN5UtBIOdvbckMhandG5fzOarqZkyjlPWzeGD+0qSKX0:+0ITWK3ByPnzgUtZ1PO5bvrMjlceGD+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d02934288a0347468c3855ab277aeff8_JaffaCakes118
Files
-
d02934288a0347468c3855ab277aeff8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c575fd55f02f087a1c2b25b28f27bc83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
FreeEnvironmentStringsA
WriteFile
GetProcAddress
MulDiv
AddAtomA
FindFirstFileA
GetCurrentThreadId
GetThreadLocale
GetLastError
GetFileAttributesA
DeleteCriticalSection
EnterCriticalSection
lstrcpyA
GetDiskFreeSpaceA
IsBadCodePtr
GetModuleHandleA
MultiByteToWideChar
ReadFile
UnhandledExceptionFilter
GetOEMCP
lstrcatA
lstrcmpA
LoadLibraryA
GetTickCount
EnumResourceNamesW
InitializeCriticalSection
CreateFileA
IsBadReadPtr
FreeLibrary
GetStartupInfoA
lstrcpynA
SetUnhandledExceptionFilter
GetEnvironmentStrings
FlushFileBuffers
WideCharToMultiByte
GetCPInfo
LCMapStringW
SetStdHandle
lstrcmpiA
GetFullPathNameA
SetDllDirectoryW
GetStringTypeW
lstrlenA
FreeEnvironmentStringsW
LCMapStringA
GetEnvironmentStringsW
GetStringTypeA
CloseHandle
Sleep
LeaveCriticalSection
SetFilePointer
RaiseException
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 89KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ