Static task
static1
Behavioral task
behavioral1
Sample
140ff53fdbe8186d2f0236ea4cf0489b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
140ff53fdbe8186d2f0236ea4cf0489b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
140ff53fdbe8186d2f0236ea4cf0489b_JaffaCakes118
-
Size
117KB
-
MD5
140ff53fdbe8186d2f0236ea4cf0489b
-
SHA1
23798c11d103981c04a494eda0321d3676b2148a
-
SHA256
4fd41bcce0507fccb2aaa819d85d4490828b3b9ce73a70310718edc4f427c470
-
SHA512
bc97fe5d13733fc9caa677e600b141c5e95010191b03e9391b883b8ac705a74c3e1007cef731109185c5fcf2e9ed16e36a0497fdd99fddc8008994258e2a707b
-
SSDEEP
3072:lkVwacnHNNKBC5CH+xF7vCww95YeoLoSqtIzp:lkV+SBC564ubYe5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140ff53fdbe8186d2f0236ea4cf0489b_JaffaCakes118
Files
-
140ff53fdbe8186d2f0236ea4cf0489b_JaffaCakes118.exe windows:5 windows x86 arch:x86
f5a9c5f54f8caa7f041b348ef83116a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
LocalFree
FormatMessageA
GetLastError
lstrlenA
LocalAlloc
FindFirstFileA
GetModuleHandleA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
FlushFileBuffers
SetFilePointer
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
CloseHandle
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiSetDeviceRegistryPropertyA
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiGetINFClassA
newdev
UpdateDriverForPlugAndPlayDevicesA
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�b� Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE