Static task
static1
Behavioral task
behavioral1
Sample
72af77c56d3b97a9b7a20d64f2eccbdb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
72af77c56d3b97a9b7a20d64f2eccbdb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
72af77c56d3b97a9b7a20d64f2eccbdb_JaffaCakes118
-
Size
270KB
-
MD5
72af77c56d3b97a9b7a20d64f2eccbdb
-
SHA1
d9728f6cb916b80d5025c97e1962f2702cfd85b0
-
SHA256
cbe4304b53299ee4a4efde997098002b12eecd8561f9f185bc79a38c0cb07f5f
-
SHA512
486782d515c20e510ff55ec7682af9f168153a175b20594f3acd3e0cd78c262c95d56868987f531c05cd9e6a3a791df4013b44a14b32446f806e03eebddee63e
-
SSDEEP
6144:aMj3EykWU+WNLtZa2XNQCZ3x2jRDXe6qzif0froq:5jUyw+u7a2XpB2dTVqziao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72af77c56d3b97a9b7a20d64f2eccbdb_JaffaCakes118
Files
-
72af77c56d3b97a9b7a20d64f2eccbdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfe48812dbffb00dfa6786a57fd6994d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
user32
SendMessageA
CreateWindowExW
DestroyWindow
IsWindow
GetDlgItem
EnumChildWindows
GetWindowThreadProcessId
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
kernel32
GetCurrentProcessId
AddAtomA
GetVersionExA
HeapSize
SetEndOfFile
VirtualQuery
GetCPInfo
HeapDestroy
GetCurrentProcess
GetStartupInfoA
FreeEnvironmentStringsA
TerminateProcess
TlsAlloc
VirtualAlloc
SetLastError
GetACP
GetEnvironmentStrings
TlsGetValue
VirtualFree
QueryPerformanceCounter
InterlockedExchange
GetEnvironmentStringsW
EnumResourceLanguagesA
UnhandledExceptionFilter
TlsFree
GetNumberFormatW
TlsSetValue
HeapCreate
GetOEMCP
WriteFile
GetLocaleInfoA
GetModuleFileNameA
GetSystemInfo
GetStdHandle
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetFileType
IsBadWritePtr
SetHandleCount
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
Sections
.text Size: 131KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ