Static task
static1
Behavioral task
behavioral1
Sample
dc084e4d404cdb17b76a9782f60fe57c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc084e4d404cdb17b76a9782f60fe57c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc084e4d404cdb17b76a9782f60fe57c_JaffaCakes118
-
Size
261KB
-
MD5
dc084e4d404cdb17b76a9782f60fe57c
-
SHA1
e035eb55bf23a07e893df05a468dc51f4ab1ee24
-
SHA256
2cf88fbd33990eab0fe1c171386e332827c0932cf64ae35b48c516acafd4f8c1
-
SHA512
78ffe2aace7769319c65860fdced73a082ef2797c32576260e13f0185be58029d28ce658001aec7ebbf0bc204c4afa9061e1cb061241156823dc06d1bebda24f
-
SSDEEP
6144:06DfY0kBE3G1fkTeLMeT9rPii3CTvMauDyQYnLq:1fY0kO2dTLMeJrPF2naoq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc084e4d404cdb17b76a9782f60fe57c_JaffaCakes118
Files
-
dc084e4d404cdb17b76a9782f60fe57c_JaffaCakes118.exe windows:4 windows x86 arch:x86
a101ab8c7351614d58a18d23e9555d5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
newdev
UpdateDriverForPlugAndPlayDevicesW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetVersionExA
VirtualAlloc
GetSystemInfo
VirtualFree
WriteFile
AddAtomA
SetLastError
FreeEnvironmentStringsA
IsBadWritePtr
GetEnvironmentStrings
TlsSetValue
HeapCreate
GetSystemTimeAsFileTime
GetStdHandle
GetModuleFileNameA
TerminateProcess
HeapSize
EnumResourceNamesW
InterlockedExchange
FreeEnvironmentStringsW
TlsFree
GetFileType
GetCurrentProcessId
TlsGetValue
TlsAlloc
GetStartupInfoA
GetACP
lstrcatW
SetEndOfFile
SetHandleCount
HeapDestroy
VirtualQuery
GetOEMCP
GetCurrentProcess
GetCPInfo
GetLocaleInfoA
UnhandledExceptionFilter
GetEnvironmentStringsW
QueryPerformanceCounter
SetUnhandledExceptionFilter
user32
GetDlgItem
EnumChildWindows
DestroyWindow
CreateWindowExW
IsWindow
SendMessageA
GetWindowThreadProcessId
shell32
SHGetFolderPathW
iphlpapi
GetIpAddrTable
Sections
.text Size: 129KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ