Static task
static1
Behavioral task
behavioral1
Sample
d9e65cbe32e3c61b4bdeba961eae23c6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d9e65cbe32e3c61b4bdeba961eae23c6_JaffaCakes118
-
Size
188KB
-
MD5
d9e65cbe32e3c61b4bdeba961eae23c6
-
SHA1
6c3550e9fdcfd231c4f49aa7db1b4521c35ddd63
-
SHA256
2ec31d7f117eb11050765674456ec7d093bfe9bfb21cfc802e7e916dc65f0ca0
-
SHA512
c3b944452c2f5cddad169a3b1913911b88113668a603b921badb6004a57c8f9dbf9578c84fde42046b7e8e23bfc30a797ce7b8d32716599fbd7c4452ddef56e2
-
SSDEEP
3072:Vx/MpU55pCmFsxWlP2gtnS4Nx7oJtqnMzegVUZneBI8G73rlqD52a0Twi:P/plFsxYB5SI6JefnQu3rscax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9e65cbe32e3c61b4bdeba961eae23c6_JaffaCakes118
Files
-
d9e65cbe32e3c61b4bdeba961eae23c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
0de3086c56a52b5715604f3fdb961908
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
comdlg32
ChooseFontA
GetOpenFileNameA
gdi32
CreateFontIndirectA
kernel32
lstrcmpiA
GetCurrentThreadId
AddAtomA
FindFirstFileA
ReadFile
LoadLibraryA
GetThreadLocale
lstrcpynA
MulDiv
WideCharToMultiByte
EnumResourceNamesA
CreateFileA
GetDiskFreeSpaceA
lstrlenA
IsDBCSLeadByteEx
FreeLibrary
lstrcatA
GetLastError
GetFileAttributesA
GetTickCount
GetFullPathNameA
VirtualProtect
FlushFileBuffers
MultiByteToWideChar
shell32
Shell_NotifyIconA
advapi32
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
ole32
CLSIDFromString
CoTaskMemFree
CoCreateInstance
StgCreateDocfile
shlwapi
PathAddBackslashA
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ