Static task
static1
Behavioral task
behavioral1
Sample
f5ff00ed60b7cd2d8cbcde97dac1cbe5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f5ff00ed60b7cd2d8cbcde97dac1cbe5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5ff00ed60b7cd2d8cbcde97dac1cbe5_JaffaCakes118
-
Size
283KB
-
MD5
f5ff00ed60b7cd2d8cbcde97dac1cbe5
-
SHA1
93821e136ccaf5bb41857a3946f9d573b29048e5
-
SHA256
4760939dccb9dd3397bd59bc0127529705856bcbc41fc4e9562f91cf75003ec6
-
SHA512
c50750d2b6af61895f6947bdece15cd807ca83f532fe90efefe650b8fa09299341d76c4d202e93c1ea74d585aac35c7a1c937f606f067edc4d5f40f7ee018726
-
SSDEEP
6144:OaTXCv8sAnSmN3j51mRW+hHKCwRpZoManuphWAJVPA0Y8Yk:LzCvZU391mM+ZKFjJanuqOZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5ff00ed60b7cd2d8cbcde97dac1cbe5_JaffaCakes118
Files
-
f5ff00ed60b7cd2d8cbcde97dac1cbe5_JaffaCakes118.exe windows:4 windows x86 arch:x86
118c4d258c923194d4d6fea2e0457b9a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
GetDlgItem
SendMessageA
DestroyWindow
EnumChildWindows
IsWindow
GetWindowThreadProcessId
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
GetCPInfo
UnhandledExceptionFilter
VirtualFree
AddAtomA
TlsGetValue
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapSize
GetStdHandle
TlsAlloc
GetVersionExA
SetLastError
SetHandleCount
TlsSetValue
GetStartupInfoA
HeapCreate
FreeEnvironmentStringsA
EnumResourceLanguagesA
GetCurrentProcess
QueryPerformanceCounter
SetEndOfFile
lstrcpynW
InterlockedExchange
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualAlloc
WriteFile
GetFileType
IsBadWritePtr
HeapDestroy
GetOEMCP
TlsFree
TerminateProcess
GetSystemInfo
GetACP
VirtualQuery
SetUnhandledExceptionFilter
newdev
UpdateDriverForPlugAndPlayDevicesW
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
iphlpapi
GetIpAddrTable
Sections
.text Size: 148KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ