Static task
static1
Behavioral task
behavioral1
Sample
76a0f318ccfd9fc95316e17f8e37b027_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
76a0f318ccfd9fc95316e17f8e37b027_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
76a0f318ccfd9fc95316e17f8e37b027_JaffaCakes118
-
Size
1.9MB
-
MD5
76a0f318ccfd9fc95316e17f8e37b027
-
SHA1
2cea245a4e1de4749d98c550cc84d8cb7ce9569a
-
SHA256
72ed6850b21610aad10f6e8b079401cc2498d65c07983c3c4db740153be464a8
-
SHA512
9da5e433bcbcec953849ed2d7f56349786ae900cc4d2dfa333064f2e3251bf32026dca7c747cfc5dbab18ee2950175a9a478a09613168d096634f1d02fcf83ae
-
SSDEEP
49152:6BH9zPqoEUP/QsGDFxUGXET3pb2uQUr3ZAK6SQKS:KHZhgFxUfT3gu3r3ZAn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76a0f318ccfd9fc95316e17f8e37b027_JaffaCakes118
Files
-
76a0f318ccfd9fc95316e17f8e37b027_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a704f8a2e91dbc9553091a67109cf4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIA
StrStrA
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
setupapi
CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
AddAtomA
GetSystemInfo
LoadLibraryW
GetThreadPriority
WideCharToMultiByte
InterlockedDecrement
Sleep
GetLastError
GetTickCount
GetSystemTime
DisableThreadLibraryCalls
ResetEvent
SetThreadPriority
VirtualAlloc
FreeLibrary
GetCurrentThread
LoadLibraryA
LoadResource
IsBadWritePtr
EnumResourceTypesW
TerminateThread
GetModuleFileNameA
WaitForMultipleObjects
InterlockedIncrement
GetExitCodeThread
GetModuleFileNameW
FindResourceA
ReleaseMutex
EnterCriticalSection
IsBadReadPtr
GetGeoInfoA
GetProcAddress
VirtualFree
GetCurrentThreadId
CreateFileW
MultiByteToWideChar
LeaveCriticalSection
GlobalAlloc
GetProcessHeap
QueryPerformanceCounter
HeapFree
GetCurrentProcessId
lstrlenA
LockResource
ExitProcess
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 903KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1021KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ