Static task
static1
Behavioral task
behavioral1
Sample
d47a155b0fd56503b907bec7a8468f65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d47a155b0fd56503b907bec7a8468f65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d47a155b0fd56503b907bec7a8468f65_JaffaCakes118
-
Size
170KB
-
MD5
d47a155b0fd56503b907bec7a8468f65
-
SHA1
7a56670a8539e47a1cda0b60e6a69c59a2d7d669
-
SHA256
13ecb0ca9ce4a8514784eef90ddc71722ebf362abdc5fa8a44b83c9ad4acbd3b
-
SHA512
e37b6872722189de3c1b668275a03cd9a770c6648598b13b1659884695a0e500a74cd75d1c1f529a8cb9ff28ce19518bc6ff4890fd0a76ecebdf663168d6afda
-
SSDEEP
3072:eXXedKJJxkrZmcAFgXaNVxL4v0VOyPmvOkbQ/N7JveZjYwJzh0PFncHFNJF/U+:GedKLFPNVx7VtmOkbG18JWPdIF1U+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d47a155b0fd56503b907bec7a8468f65_JaffaCakes118
Files
-
d47a155b0fd56503b907bec7a8468f65_JaffaCakes118.exe windows:4 windows x86 arch:x86
f07be0cda1e7e8dd5ae93b416136592d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
SendMessageA
GetDlgItem
CreateWindowExW
EnumChildWindows
DestroyWindow
GetWindowThreadProcessId
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
iphlpapi
GetIpAddrTable
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
AddAtomA
TlsSetValue
GetStartupInfoA
GetSystemInfo
GetLocaleInfoA
GetCurrentProcessId
GetEnvironmentStrings
SetEndOfFile
GetVersionExA
GetFileType
UnhandledExceptionFilter
GetStdHandle
TlsFree
FreeEnvironmentStringsW
GetOEMCP
TlsGetValue
TlsAlloc
SetLastError
GetACP
IsBadWritePtr
SetHandleCount
EnumResourceLanguagesA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
WriteFile
lstrcpynW
QueryPerformanceCounter
GetCPInfo
InterlockedExchange
VirtualFree
HeapDestroy
VirtualAlloc
HeapSize
GetCurrentProcess
HeapCreate
VirtualQuery
GetModuleFileNameA
TerminateProcess
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
Sections
.text Size: 92KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ