Static task
static1
Behavioral task
behavioral1
Sample
e3b242f2046c46b5dc5d0f665bca17ef_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e3b242f2046c46b5dc5d0f665bca17ef_JaffaCakes118
-
Size
285KB
-
MD5
e3b242f2046c46b5dc5d0f665bca17ef
-
SHA1
9452d320d80f84cc6f3b20d4ed248e419a20bc5e
-
SHA256
083b9e4f09c26d83426a90736144302499460923100f2887df34ddbb37a4015c
-
SHA512
c85e98d14899f46626b6f1c71d93c4b487771d15afee41b021a9a1ba692719670d030a2f67154f1aa4499200c1f010b6be2f2e95f76e5779ed196b02769f97f0
-
SSDEEP
6144:pt+0bu+y21IszRyAB3pKE7rrmhmOKdd0K6PfmlYM1T:dS+y2S03HHrm1QP6Pfm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3b242f2046c46b5dc5d0f665bca17ef_JaffaCakes118
Files
-
e3b242f2046c46b5dc5d0f665bca17ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5265db6703335c860a760058ba1bd93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
user32
GetDlgItem
DestroyWindow
EnumChildWindows
CreateWindowExW
SendMessageA
IsWindow
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
kernel32
VirtualAlloc
AddAtomA
GetModuleFileNameA
GetEnvironmentStrings
UnhandledExceptionFilter
HeapSize
HeapCreate
TlsGetValue
WriteFile
GetStdHandle
GetLocaleInfoA
TerminateProcess
HeapDestroy
GetCPInfo
GetFileType
SetHandleCount
SetLastError
EnumResourceNamesA
VirtualFree
TlsSetValue
VirtualQuery
GetCurrentProcess
IsBadWritePtr
TlsFree
FreeEnvironmentStringsW
GetSystemInfo
GetStartupInfoA
InterlockedExchange
lstrcatA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
QueryPerformanceCounter
TlsAlloc
GetVersionExA
SetEndOfFile
GetACP
GetCurrentProcessId
GetOEMCP
SetUnhandledExceptionFilter
Sections
.text Size: 151KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ