Static task
static1
Behavioral task
behavioral1
Sample
dc514ddd4bcb896abf6b230206e7aac4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc514ddd4bcb896abf6b230206e7aac4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc514ddd4bcb896abf6b230206e7aac4_JaffaCakes118
-
Size
178KB
-
MD5
dc514ddd4bcb896abf6b230206e7aac4
-
SHA1
2c930c965bb75037eb58dccdb7cd44dcd9311ed0
-
SHA256
5b5282885be8840c636f93c9844cefa32f073d9f70efa858054bd840085cd003
-
SHA512
510b470bf729112c4532d9aa09cc8098e09fe1fe889dad651421e9cf1d3a9641a86e5b848e58b4252d2a24d52deaf30009f54477ec21ab58ceea4095428469a0
-
SSDEEP
3072:ST+PzecO+bW/phOhzSPkMYWdH9kXID+PIqm2v4XNlMUhR44Y6j5W3UFKoL7KwkCD:SP+MhctPWpsAqp4jMUhRTY69WkjeCj/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc514ddd4bcb896abf6b230206e7aac4_JaffaCakes118
Files
-
dc514ddd4bcb896abf6b230206e7aac4_JaffaCakes118.exe windows:4 windows x86 arch:x86
b73de245235e2e0f394a8022cac62c63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetAtomNameW
GetCurrentProcess
InterlockedExchange
QueryPerformanceCounter
UnhandledExceptionFilter
GetModuleHandleW
GetACP
TerminateProcess
RaiseException
GetLocaleInfoW
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTickCount
EnumResourceNamesA
Sleep
MultiByteToWideChar
lstrlenA
InterlockedCompareExchange
TzSpecificLocalTimeToSystemTime
WideCharToMultiByte
LocalAlloc
CreateProcessW
GetCurrentThreadId
GetEnvironmentVariableW
GetStartupInfoW
lstrlenW
GetThreadLocale
winmm
mciSendCommandA
sndPlaySoundA
oleacc
LresultFromObject
CreateStdAccessibleObject
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
shlwapi
PathAddBackslashA
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ