Static task
static1
Behavioral task
behavioral1
Sample
178879ab8c7f9a21e10c66d74e697c2b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
178879ab8c7f9a21e10c66d74e697c2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
178879ab8c7f9a21e10c66d74e697c2b_JaffaCakes118
-
Size
168KB
-
MD5
178879ab8c7f9a21e10c66d74e697c2b
-
SHA1
1957a9689df2e9dbc3ca2bde41f8842b10ed34e5
-
SHA256
61977fdd8ed72d038e372d1247e664167f7b13b98faaab63569a272dab161cca
-
SHA512
a45c08205fdb9726ac8ffc20feb29fd5323dcd9d72bf518cf77489eda7a3562b4055d83d60be1445147bbf07b63b2d3c1b915947ae4ade620a1168d1f35e075b
-
SSDEEP
3072:AqU/dvWKBwr3dU1iJhl45OoaVGjNjGT4k8PLV1q5dSqtF6V8a8ORnC0:QVvja3kiJhlNNVGjATULVQ3SYMd82Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 178879ab8c7f9a21e10c66d74e697c2b_JaffaCakes118
Files
-
178879ab8c7f9a21e10c66d74e697c2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
abaf2a6b212082be3a7e8992e421aca4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZClose
LZCopy
LZOpenFileA
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
advapi32
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
kernel32
GlobalLock
VirtualFree
GetFileSize
CreateDirectoryA
LocalFree
SetFileAttributesA
GlobalFree
AddAtomW
GetCurrentThreadId
GetVersionExA
ReadFile
CopyFileA
CreateFileA
CreateMutexA
WideCharToMultiByte
DeleteCriticalSection
InterlockedIncrement
MultiByteToWideChar
GetSystemTime
GetModuleFileNameW
GetSystemTimeAsFileTime
GetTempPathA
DeleteFileA
InitializeCriticalSection
Sleep
SetFilePointer
GetModuleFileNameA
EnumResourceNamesA
QueryPerformanceCounter
VirtualAlloc
GetCurrentProcessId
InterlockedDecrement
DisableThreadLibraryCalls
CreateFileW
DeviceIoControl
CheckNameLegalDOS8Dot3W
GlobalUnlock
ReleaseMutex
GetVolumeInformationA
GetFileAttributesA
CloseHandle
lstrlenA
WaitForSingleObject
LocalAlloc
GetLastError
GetTempFileNameA
GetTickCount
FreeLibrary
Sections
.text Size: 88KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ