Static task
static1
Behavioral task
behavioral1
Sample
df9793eb2e2ca59a93cf5f81c9d909cc_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
df9793eb2e2ca59a93cf5f81c9d909cc_JaffaCakes118
-
Size
169KB
-
MD5
df9793eb2e2ca59a93cf5f81c9d909cc
-
SHA1
ab2f7c91e16fcaca8d465b3b7ad585629657749f
-
SHA256
f59245b84b7115063382965ac68e0e21351e2cd8775512319959698e4fbbb6b2
-
SHA512
60c2fe549a5664d5edf65ff7b3177a8c591e82f69a5a6a550b51e36805fb87996407946d3b4a3e91af15f184eed8e40f95fb89e4827be7378e0006433634290c
-
SSDEEP
3072:+W/iD3zdj3IKcSIN0IfyoJVSG9M0YFJqnu/PcC1RGM/MXnxxDJCQm:x/iD3zJ3IhSINDa+79M04J7PJRNU3x5m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df9793eb2e2ca59a93cf5f81c9d909cc_JaffaCakes118
Files
-
df9793eb2e2ca59a93cf5f81c9d909cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa856ce06f2a6f232c7c2fce757f253b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
advapi32
RegQueryValueExA
RegEnumKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegCloseKey
lz32
LZClose
LZCopy
LZOpenFileA
kernel32
CreateMutexA
CreateFileW
AddAtomW
GetTickCount
GlobalLock
GetTempFileNameA
QueryPerformanceCounter
InitializeCriticalSection
lstrlenA
WideCharToMultiByte
GetVolumeInformationA
GlobalFree
InterlockedDecrement
DeleteFileA
GlobalUnlock
CreateDirectoryA
CopyFileA
GetFileSize
ReleaseMutex
LocalFree
GetSystemTimeAsFileTime
ReadFile
GetVersionExA
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameA
EnumResourceNamesA
GetCurrentProcessId
SetFilePointer
LocalAlloc
CreateHardLinkW
DisableThreadLibraryCalls
GetModuleFileNameW
DeviceIoControl
CreateFileA
VirtualAlloc
SetFileAttributesA
GetFileAttributesA
GetTempPathA
VirtualFree
WaitForSingleObject
GetLastError
CloseHandle
MultiByteToWideChar
GetSystemTime
DeleteCriticalSection
Sleep
FreeLibrary
Sections
.text Size: 91KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ