Static task
static1
Behavioral task
behavioral1
Sample
de0f6403045ed1045c30010085fcb548_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de0f6403045ed1045c30010085fcb548_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de0f6403045ed1045c30010085fcb548_JaffaCakes118
-
Size
172KB
-
MD5
de0f6403045ed1045c30010085fcb548
-
SHA1
414d08118b91b4edc81a4da8f1e731cec787c55d
-
SHA256
196b9094d540463bc4df318faaad2cfe4543a5ed9e3b729a5257c6adb64520d7
-
SHA512
fedf520cb65e8ac9c0d25f16aa74c91c5f1a29a176f898c2d72b5ed295d0fe653e721abf0f972b930ad353c95980de3d4972b7516916debadeba697d4c652218
-
SSDEEP
3072:KKoYkSXAfKzxL3J8eLxR09uWqQcnCCx0e556YPQocLQ4sxOsh+JfuiSZkIYwhJ30:KKoYwYL3JVlRGtfCz5XxcHYEuCAcP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de0f6403045ed1045c30010085fcb548_JaffaCakes118
Files
-
de0f6403045ed1045c30010085fcb548_JaffaCakes118.exe windows:4 windows x86 arch:x86
d61bb7c1f2081cf22da9abf71c952acb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
shlwapi
PathAddBackslashA
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
oleacc
LresultFromObject
CreateStdAccessibleObject
winmm
mciSendCommandA
sndPlaySoundA
kernel32
Sleep
GetAtomNameW
WideCharToMultiByte
LocalAlloc
UnhandledExceptionFilter
GetLocaleInfoW
GetCurrentThreadId
MultiByteToWideChar
CreateProcessW
InterlockedCompareExchange
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
InterlockedExchange
GetTickCount
EnumResourceNamesA
GetModuleHandleW
GetACP
RaiseException
GetSystemTimeAsFileTime
QueryMemoryResourceNotification
TerminateProcess
QueryPerformanceCounter
GetEnvironmentVariableW
SetUnhandledExceptionFilter
GetCurrentProcess
lstrlenW
lstrlenA
GetThreadLocale
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ