Static task
static1
Behavioral task
behavioral1
Sample
de3d2e05f336d3def9627acf6207e491_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de3d2e05f336d3def9627acf6207e491_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
de3d2e05f336d3def9627acf6207e491_JaffaCakes118
-
Size
172KB
-
MD5
de3d2e05f336d3def9627acf6207e491
-
SHA1
0952fecd2e53ec418d936812e42aecb10a0bbfaf
-
SHA256
53ed384c3457e3d19f7ac0b743028abed6ac2018c223a280403d2d8a6c6cee8d
-
SHA512
720836d66df010601ba39c913ce7922d19d5fbd9180f892c78d01b74fa137fa2d6c1f8edbe57d834ba9e714e8c80081193bbb5223f282fcec61e14fa0e6fd2b1
-
SSDEEP
3072:DzRJpmbQ0n85faqNZNcJtRVOlwbvrxYpuxqiuUSzhYGrVQOipATuWs+bYL7:DzRJkfZBd7fNfMh7rVQOieToZL7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3d2e05f336d3def9627acf6207e491_JaffaCakes118
Files
-
de3d2e05f336d3def9627acf6207e491_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb7f97e64fa6abf5c7be2b8d36562b2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
kernel32
GetShortPathNameA
lstrlenA
CloseHandle
IsDebuggerPresent
InitializeCriticalSection
CreateFileA
GetProcAddress
GetSystemTimeAsFileTime
GetProcessWorkingSetSize
WideCharToMultiByte
IsBadWritePtr
SetUnhandledExceptionFilter
GetACP
LocalFree
ExitProcess
InterlockedIncrement
GetTickCount
EnterCriticalSection
GetCurrentProcessId
IsBadReadPtr
GetModuleHandleA
GetThreadLocale
EnumResourceTypesA
DeleteCriticalSection
GetCurrentThreadId
MultiByteToWideChar
FreeLibrary
UnhandledExceptionFilter
GetLastError
GetFileAttributesA
GetLocaleInfoA
InterlockedExchange
InterlockedDecrement
LeaveCriticalSection
LoadLibraryA
lstrlenW
QueryPerformanceCounter
GetVersionExA
ole32
StgCreateDocfile
StgOpenStorage
shell32
SHGetSpecialFolderPathA
advapi32
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
user32
wsprintfA
wsprintfW
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ