Static task
static1
Behavioral task
behavioral1
Sample
f9a7c8ec8d166ab1bd3c3782e9b80acf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9a7c8ec8d166ab1bd3c3782e9b80acf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9a7c8ec8d166ab1bd3c3782e9b80acf_JaffaCakes118
-
Size
275KB
-
MD5
f9a7c8ec8d166ab1bd3c3782e9b80acf
-
SHA1
7d7d97d423bf806196446c9c766cd0f69a86189d
-
SHA256
c37cd29d8d3d1aa6dd46b2e41fcd723590058b172a1b81b0a6feb97d34498687
-
SHA512
0b2f792aa92b95a25ebae01eb8f00172d4ee5079e3c2463dfffa0d6d5dcfe0a25551ff04eb8da132f76a231b1261fb83e444990328a5a2ec6eb860cd09854e42
-
SSDEEP
3072:UJBVjSN+WomNyI9NG7s2rI2uRerWpT/U6yvZX42TWALuKVyI9K3gxlUQh/AjdHoM:6SyWN126EWpAK2pZVj9K3mAj1nd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a7c8ec8d166ab1bd3c3782e9b80acf_JaffaCakes118
Files
-
f9a7c8ec8d166ab1bd3c3782e9b80acf_JaffaCakes118.exe windows:4 windows x86 arch:x86
e93f5037b9bfd14991412da1d9d1ef86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
KillTimer
LoadStringA
CharUpperA
PostThreadMessageA
EnumWindows
CharNextA
GetMessageA
MessageBoxA
GetWindowThreadProcessId
DispatchMessageA
IsWindowVisible
wsprintfW
SetTimer
PeekMessageA
GetWindowTextA
wsprintfA
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GlobalAddAtomW
SetConsoleCtrlHandler
GetFileType
HeapDestroy
WriteFile
HeapCreate
GetOEMCP
VirtualFree
GetEnvironmentVariableA
WideCharToMultiByte
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointer
EnumResourceNamesA
IsBadWritePtr
FreeEnvironmentStringsA
IsBadCodePtr
GetCPInfo
GetEnvironmentStrings
GetStartupInfoA
GetDateFormatW
SetHandleCount
FatalAppExitA
GetACP
UnhandledExceptionFilter
VirtualAlloc
GetStdHandle
HeapReAlloc
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentThread
Sections
.text Size: 139KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ