Static task
static1
Behavioral task
behavioral1
Sample
d5b67bd50cf89cfd96993c03a9dd2e33_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d5b67bd50cf89cfd96993c03a9dd2e33_JaffaCakes118
-
Size
173KB
-
MD5
d5b67bd50cf89cfd96993c03a9dd2e33
-
SHA1
2dc877337c9be79ce03b41ad37c1d20e9b95d555
-
SHA256
f71aeb893ef12b982da7f2ed15be9d9929559f220e3d54b76530d792a50159e6
-
SHA512
317f6cd74481f1d2a4dc41f524f336e18956c87580b5c84d3a3557f9d8d158c8550c5ff2ab95fbba05cae84263c51217c319585b4493f5b6ff7733a10c93870b
-
SSDEEP
3072:tKHIc/gRngGnSNR9tcSD20gO7ySuUPsvxvXwjqWLf9hGOiyIZDsockB9S:t7KgR7efhvN0vxvgjqWLfXGBZDJcF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5b67bd50cf89cfd96993c03a9dd2e33_JaffaCakes118
Files
-
d5b67bd50cf89cfd96993c03a9dd2e33_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a724aba2ecfe10299a862f8fd05dc87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
advapi32
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey
lz32
LZClose
LZCopy
LZOpenFileA
kernel32
InterlockedIncrement
CreateMutexA
GetModuleFileNameA
DeleteCriticalSection
MultiByteToWideChar
GlobalFree
GetVersionExA
QueryPerformanceCounter
AddAtomW
GetTickCount
lstrlenA
InitializeCriticalSection
GlobalUnlock
WaitForSingleObject
VirtualFree
CloseHandle
CopyFileA
GetSystemTime
GetFileAttributesA
GetSystemTimeAsFileTime
EnumResourceNamesA
LocalFree
CreateFileW
GlobalLock
VirtualAlloc
ReleaseMutex
DeleteFileA
Sleep
GetTempPathA
WideCharToMultiByte
InterlockedDecrement
ReadFile
GetLastError
CheckNameLegalDOS8Dot3W
SetFilePointer
LocalAlloc
CreateFileA
DisableThreadLibraryCalls
GetVolumeInformationA
GetModuleFileNameW
SetFileAttributesA
GetFileSize
GetTempFileNameA
DeviceIoControl
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryA
FreeLibrary
Sections
.text Size: 91KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ