Static task
static1
Behavioral task
behavioral1
Sample
9ca5e21586e3a7ed386b75893a2ecdc4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
9ca5e21586e3a7ed386b75893a2ecdc4_JaffaCakes118
-
Size
285KB
-
MD5
9ca5e21586e3a7ed386b75893a2ecdc4
-
SHA1
db11b19b2e6a31e4902c2267ccbf3a68f5a92ecb
-
SHA256
f6efcb5d72f1653ed8f6e9fb68e2cf55fa61177a992a9ac7019440a2f46ad0b0
-
SHA512
be971fe253d7c1722ff8a8f1817f6386c1aead4585889fee85815c4b2d8937970dd502c52944edd640c3322c4dd190976e4f33891780e2ef8f4c309fdf0c6fdf
-
SSDEEP
6144:7pBGVKtQ0otLvnko+XxoSb2xBliiyNgccAOFAIgcAxlHWC:t98nTu3mmiyGcgLl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ca5e21586e3a7ed386b75893a2ecdc4_JaffaCakes118
Files
-
9ca5e21586e3a7ed386b75893a2ecdc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
7341d0da13c2d01b079092548a15034a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetIpAddrTable
user32
SendMessageA
CreateWindowExW
EnumChildWindows
DestroyWindow
IsWindow
GetDlgItem
GetWindowThreadProcessId
shell32
SHGetFolderPathW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
newdev
UpdateDriverForPlugAndPlayDevicesW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
FreeEnvironmentStringsW
TlsAlloc
GetCPInfo
AddAtomA
GetVersionExA
SetEndOfFile
GetStartupInfoA
SetLastError
HeapCreate
InterlockedExchange
TlsSetValue
GetEnvironmentStringsW
GetSystemInfo
GetFileType
GetCurrentProcess
VirtualQuery
HeapDestroy
HeapSize
GetStdHandle
EnumResourceNamesA
GetLocaleInfoA
SetHandleCount
WriteFile
lstrcatA
GetEnvironmentStrings
GetACP
GetOEMCP
GetModuleFileNameA
IsBadWritePtr
GetCurrentProcessId
VirtualAlloc
QueryPerformanceCounter
VirtualFree
TerminateProcess
UnhandledExceptionFilter
TlsFree
GetSystemTimeAsFileTime
TlsGetValue
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
Sections
.text Size: 153KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ