Static task
static1
Behavioral task
behavioral1
Sample
d40d52974cc2952024bee38bebe3eaaf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d40d52974cc2952024bee38bebe3eaaf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d40d52974cc2952024bee38bebe3eaaf_JaffaCakes118
-
Size
1.1MB
-
MD5
d40d52974cc2952024bee38bebe3eaaf
-
SHA1
256f02e8c1bb5f307c47e44e8c0673e3b4237253
-
SHA256
1b791f65de002c4aa6a6e3ed30eb08e60b19d4f13466692b3bf5f156cfcdaefd
-
SHA512
3928f11e15bdbcf17de1dae592d3d75d1a82e491bc4e1b0a855a611c1191092b23c2ff64935b69c6c1c2457b9d8ff94eec091792a14a00686348bfece3d52ebd
-
SSDEEP
24576:Hw5+jIcpnJ//0L+hN9DWDDYo/sD9LsRVeC+nS/fq/9Gt/:Hg00YvVx4TvHJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d40d52974cc2952024bee38bebe3eaaf_JaffaCakes118
Files
-
d40d52974cc2952024bee38bebe3eaaf_JaffaCakes118.exe windows:5 windows x86 arch:x86
00b2c444ae6cff1a16a169b8c4c15723
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleBaseNameW
GetMappedFileNameW
kernel32
GetModuleFileNameW
CloseHandle
WriteConsoleW
RtlUnwind
GetProcAddress
GlobalUnlock
VirtualAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentThreadId
GetLastError
EnterCriticalSection
ReadFile
SetFilePointer
GetSystemTimeAsFileTime
FormatMessageW
CreateDirectoryW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
HeapReAlloc
HeapAlloc
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
CreateFileW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
OutputDebugStringW
userenv
RegisterGPNotification
EnterCriticalPolicySection
LeaveCriticalPolicySection
setupapi
CM_Get_Device_IDW
SetupDiSetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
CM_Get_Device_ID_ExW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiEnumDriverInfoW
SetupDiGetDeviceInfoListDetailW
SetupGetIntField
CM_Get_DevNode_Registry_Property_ExW
SetupDiGetClassDevsExW
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ovud Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iw9h1o Size: 695KB - Virtual size: 695KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ