Static task
static1
Behavioral task
behavioral1
Sample
8d823732d7c08e9d006ad28dcfcd9853_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d823732d7c08e9d006ad28dcfcd9853_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8d823732d7c08e9d006ad28dcfcd9853_JaffaCakes118
-
Size
1.9MB
-
MD5
8d823732d7c08e9d006ad28dcfcd9853
-
SHA1
50bd2a3e3d9cb967c8aa9fd72bb0a2626d350da3
-
SHA256
645397aa16ec0291f74945cc4d4a535d7a8b26b1ac11629be76a91f50124c658
-
SHA512
9be430e058188fd78d2134eb002f55c8206f1b16edd9f9d27f1cdcf18a1c840202ddfabd7cfa6012c64467f426db58d5ba76f961844f09859cbade5dc72aada3
-
SSDEEP
49152:6yH9zPqoEUP/QsGDFxUGXET3pb2uQUr3ZAK6SQKS:RHZhgFxUfT3gu3r3ZAn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d823732d7c08e9d006ad28dcfcd9853_JaffaCakes118
Files
-
8d823732d7c08e9d006ad28dcfcd9853_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a704f8a2e91dbc9553091a67109cf4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIA
StrStrA
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
setupapi
CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
AddAtomA
GetSystemInfo
LoadLibraryW
GetThreadPriority
WideCharToMultiByte
InterlockedDecrement
Sleep
GetLastError
GetTickCount
GetSystemTime
DisableThreadLibraryCalls
ResetEvent
SetThreadPriority
VirtualAlloc
FreeLibrary
GetCurrentThread
LoadLibraryA
LoadResource
IsBadWritePtr
EnumResourceTypesW
TerminateThread
GetModuleFileNameA
WaitForMultipleObjects
InterlockedIncrement
GetExitCodeThread
GetModuleFileNameW
FindResourceA
ReleaseMutex
EnterCriticalSection
IsBadReadPtr
GetGeoInfoA
GetProcAddress
VirtualFree
GetCurrentThreadId
CreateFileW
MultiByteToWideChar
LeaveCriticalSection
GlobalAlloc
GetProcessHeap
QueryPerformanceCounter
HeapFree
GetCurrentProcessId
lstrlenA
LockResource
ExitProcess
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 903KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1021KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ