Static task
static1
Behavioral task
behavioral1
Sample
f4a8f3cc88319e98ccdefc9f89dd81c4_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
f4a8f3cc88319e98ccdefc9f89dd81c4_JaffaCakes118
-
Size
280KB
-
MD5
f4a8f3cc88319e98ccdefc9f89dd81c4
-
SHA1
c08b24aaa2d980b0d9ae7ca347c2578c789d15e6
-
SHA256
dd6ea1b66ccd08568aa121276f737d5d43b1567aab8b362901028d221e179140
-
SHA512
bc0dd19666eff6ad45dd069ea0009ba8dd92648d5b047c0e78ba4641dbafb2ab474d8d91db63ac56434959af23e01690924bd323007d16bd0c0ca19ee5df8405
-
SSDEEP
6144:q8RX+991/Z3sr7xDP3KDdslpn7xqQ0Wt60vlOU0V/hF:/kfZZ8rRP3AEp7xqjWPlH0pr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4a8f3cc88319e98ccdefc9f89dd81c4_JaffaCakes118
Files
-
f4a8f3cc88319e98ccdefc9f89dd81c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f95d1b55d3df8b149cefc2393446cde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
MulDiv
SetFilePointer
Sleep
AddAtomA
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
lstrcmpiA
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
IsBadCodePtr
GetEnvironmentStrings
GetFullPathNameA
LoadLibraryA
LeaveCriticalSection
lstrcpynA
GetCurrentThreadId
IsBadReadPtr
MultiByteToWideChar
FreeLibrary
GetStartupInfoA
GetTickCount
GetEnvironmentStringsW
lstrcmpA
GetDiskFreeSpaceA
CreateFileA
GetStringTypeW
EnumResourceNamesW
GetOEMCP
WriteFile
GetStringTypeA
FreeEnvironmentStringsW
GetLastError
LCMapStringA
GetFileAttributesA
SetStdHandle
ReadFile
lstrcatA
GetProcAddress
lstrlenA
lstrlenW
lstrcpyA
VirtualProtect
GetThreadLocale
UnhandledExceptionFilter
InitializeCriticalSection
FindFirstFileA
FlushFileBuffers
GetModuleHandleA
LCMapStringW
CloseHandle
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 139KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ