Static task
static1
Behavioral task
behavioral1
Sample
3a336189c800699751460c6f1837d4cf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3a336189c800699751460c6f1837d4cf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a336189c800699751460c6f1837d4cf_JaffaCakes118
-
Size
282KB
-
MD5
3a336189c800699751460c6f1837d4cf
-
SHA1
80905f447e4910a945e820c036da8d647f4bfeb1
-
SHA256
7a775fffeba68b48b6dbe1dc85f2d2f468635c53bdc73611eae595c629b50ac7
-
SHA512
0c81cfe04de66fd2ba1b2b1de03f04d5e029dc7ff73a8f61f5be85d270dd46e988b93ea0c0ce129331428081b18072d021c251b8e9f1397ad2e17600654f82e1
-
SSDEEP
6144:Kzt9m3a9UrUPUYuvCP9RW7/G3/omTk5VuM3jcOFhBtEvQlm:Yt7pXumH3QmQlDEolm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a336189c800699751460c6f1837d4cf_JaffaCakes118
Files
-
3a336189c800699751460c6f1837d4cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
08e8b32196cdb9cbb2629eadf55137a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
iphlpapi
GetIpAddrTable
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
user32
IsWindow
SendMessageA
DestroyWindow
CreateWindowExW
EnumChildWindows
GetDlgItem
GetWindowThreadProcessId
kernel32
AddAtomA
GetCPInfo
VirtualFree
TlsSetValue
GetACP
TerminateProcess
IsBadWritePtr
GetStdHandle
VirtualQuery
GetCurrentProcessId
GetModuleFileNameA
GetOEMCP
GetStartupInfoA
TlsGetValue
GetLocaleInfoA
FreeEnvironmentStringsW
VirtualAlloc
TlsFree
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
GetVersionExA
EnumResourceLanguagesA
lstrcpyW
GetCurrentProcess
FreeEnvironmentStringsA
InterlockedExchange
GetSystemInfo
WriteFile
GetEnvironmentStrings
SetLastError
SetEndOfFile
QueryPerformanceCounter
HeapCreate
GetSystemTimeAsFileTime
GetFileType
HeapSize
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 142KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ