Static task
static1
Behavioral task
behavioral1
Sample
d0f0b91fb9edda7fa0adbfbded2e4fe9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d0f0b91fb9edda7fa0adbfbded2e4fe9_JaffaCakes118
-
Size
178KB
-
MD5
d0f0b91fb9edda7fa0adbfbded2e4fe9
-
SHA1
7128c7f31c577e92a537198441e536be4f5301a7
-
SHA256
1a6de1d6a94d5eeeb2ea4504c2ef4fa6d9e0c25ee22c602fcaf7445d3b0a1827
-
SHA512
67c8f9d98a70a470ae263c1db8a310bf0d35c992c6ff12fcf43d0d4341eb9a2afb1de65a9d1d4cf3acc5434ddf29527b525200f3bee910667c3a8ffe2076d6b3
-
SSDEEP
3072:kFZgh6BqWaJssjUurgvVICAwhhtULZDBqNXcY8QnSh6LtY/G:kFZgh6/sjCShvlBqNX/QytY/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0f0b91fb9edda7fa0adbfbded2e4fe9_JaffaCakes118
Files
-
d0f0b91fb9edda7fa0adbfbded2e4fe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
05d26ebd88f305a700bca19e9196a68b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
IsWindow
SendMessageA
GetDlgItem
EnumChildWindows
DestroyWindow
GetWindowThreadProcessId
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
AddAtomA
VirtualQuery
InterlockedExchange
HeapSize
GetOEMCP
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
HeapDestroy
TlsGetValue
GetSystemTimeAsFileTime
GetCurrentProcess
GetEnvironmentStrings
GetCPInfo
VirtualFree
TlsFree
GetACP
SetEndOfFile
EnumResourceLanguagesA
GetLocaleInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
TerminateProcess
TlsSetValue
GetFileType
SetLastError
GetSystemInfo
HeapCreate
GetNumberFormatW
GetModuleFileNameA
FreeEnvironmentStringsA
IsBadWritePtr
WriteFile
VirtualAlloc
FreeEnvironmentStringsW
GetVersionExA
GetCurrentProcessId
GetStartupInfoA
TlsAlloc
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 89KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ