Static task
static1
Behavioral task
behavioral1
Sample
93dc02754068a3e580cee8d058a5dbaf_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
93dc02754068a3e580cee8d058a5dbaf_JaffaCakes118
-
Size
181KB
-
MD5
93dc02754068a3e580cee8d058a5dbaf
-
SHA1
8cfe4d654e8c80bc5662785ef26ddc5db67253c7
-
SHA256
83c4ca883e96da4963e62ffa6a5d8a139f43999772c024dd6a42c059c668ad45
-
SHA512
d98a86ebafaf7cc703c874d553367562cb1335b5521655643333b722fda21cccf7949e4b1bb682d7c3d41248db7b5fe7f17d3550715ee82facf1851afbe9914d
-
SSDEEP
3072:6za/stqsLtNsNMSg5q6Wv7M/5zYQogkzV5KoNzSTqi4UfhYpeYWVnS8y9vn83vwU:9/kTIX/NwR7oRV5XNz0D4khNhG9vuw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 93dc02754068a3e580cee8d058a5dbaf_JaffaCakes118
Files
-
93dc02754068a3e580cee8d058a5dbaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
f0e73c45987d99a9054731c8e378a3a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
FreeEnvironmentStringsW
GetEnvironmentStrings
WriteFile
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsA
EnumResourceLanguagesA
GetStringTypeExW
GetStartupInfoA
UnhandledExceptionFilter
GetCPInfo
SetUnhandledExceptionFilter
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
user32
DestroyWindow
IsWindow
EnumChildWindows
CreateWindowExW
GetDlgItem
SendMessageA
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 92KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ