Static task
static1
Behavioral task
behavioral1
Sample
25027391c28808bfb3bdf64c632c5ffd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25027391c28808bfb3bdf64c632c5ffd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25027391c28808bfb3bdf64c632c5ffd_JaffaCakes118
-
Size
279KB
-
MD5
25027391c28808bfb3bdf64c632c5ffd
-
SHA1
6586fbceb7a5e4957aeb6bf09457c81de72abaa1
-
SHA256
9ad5d7edc4d6512bc6efbbfff7ddf0ba3fd15eb1c3a50bb0c3b7df7b7aea8e0a
-
SHA512
b24868aa4eb9c1dd69a6d9708307bea71de0186996940b643f830a31a97b5d7c67281b9dbda01bb2dc902bfe2189eab01413e408d5515b74a0192aede5336bef
-
SSDEEP
6144:sYK/X65QAp1KIgXTGSnnTYnd525hGFyFt2wbAjMSJ3DIEVXbxjJV9Rq:3KP65QAp0tf8dYxb2we3ZFxtrR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25027391c28808bfb3bdf64c632c5ffd_JaffaCakes118
Files
-
25027391c28808bfb3bdf64c632c5ffd_JaffaCakes118.exe windows:4 windows x86 arch:x86
c86662caffaeb2e9ebedf2558727592b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
kernel32
InterlockedCompareExchange
GlobalAddAtomA
FreeLibrary
ExitProcess
GetStartupInfoA
RtlUnwind
EnumResourceNamesW
InterlockedExchange
GetTickCount
FindClose
QueryPerformanceCounter
SetUnhandledExceptionFilter
LoadLibraryExW
GetLongPathNameA
Sleep
GetProcAddress
ole32
CLSIDFromString
CoTaskMemFree
CoCreateInstance
StgCreateDocfile
comdlg32
ChooseFontA
GetOpenFileNameA
Sections
.text Size: 143KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ