Static task
static1
Behavioral task
behavioral1
Sample
fc7f63ccd826f0bed675aac69a0969d3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc7f63ccd826f0bed675aac69a0969d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc7f63ccd826f0bed675aac69a0969d3_JaffaCakes118
-
Size
1.9MB
-
MD5
fc7f63ccd826f0bed675aac69a0969d3
-
SHA1
8bb1e89f1080e272cd77e2a08933a9daf3d9db85
-
SHA256
ccd9dd1098157c884c04bc46825b296607774534e5c4200b856b28a13e03f365
-
SHA512
1f661e13ccf40e8321abdf9344a8dc3600c2ec41fbac7be301eaeb381e8d8302565570383c226b34b71a3e020ed5a13a93018a8729db7e8f3e67e52d1019b192
-
SSDEEP
49152:6/H9zPqoEUP/QsGDFxUGXET3pb2uQUr3ZAK6SQKS:gHZhgFxUfT3gu3r3ZAn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc7f63ccd826f0bed675aac69a0969d3_JaffaCakes118
Files
-
fc7f63ccd826f0bed675aac69a0969d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a704f8a2e91dbc9553091a67109cf4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIA
StrStrA
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
setupapi
CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
AddAtomA
GetSystemInfo
LoadLibraryW
GetThreadPriority
WideCharToMultiByte
InterlockedDecrement
Sleep
GetLastError
GetTickCount
GetSystemTime
DisableThreadLibraryCalls
ResetEvent
SetThreadPriority
VirtualAlloc
FreeLibrary
GetCurrentThread
LoadLibraryA
LoadResource
IsBadWritePtr
EnumResourceTypesW
TerminateThread
GetModuleFileNameA
WaitForMultipleObjects
InterlockedIncrement
GetExitCodeThread
GetModuleFileNameW
FindResourceA
ReleaseMutex
EnterCriticalSection
IsBadReadPtr
GetGeoInfoA
GetProcAddress
VirtualFree
GetCurrentThreadId
CreateFileW
MultiByteToWideChar
LeaveCriticalSection
GlobalAlloc
GetProcessHeap
QueryPerformanceCounter
HeapFree
GetCurrentProcessId
lstrlenA
LockResource
ExitProcess
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 903KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1021KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ