Static task
static1
Behavioral task
behavioral1
Sample
f91bf6abc3e3c1f1d7ccb851c04d3963_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f91bf6abc3e3c1f1d7ccb851c04d3963_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f91bf6abc3e3c1f1d7ccb851c04d3963_JaffaCakes118
-
Size
188KB
-
MD5
f91bf6abc3e3c1f1d7ccb851c04d3963
-
SHA1
a7f79dc8ec8f42b55fbb04984b5448947eebfde3
-
SHA256
1ab8f3a1a6c45bd71971830695341ca555f8ccfad53277ffdefa9154594f4c7d
-
SHA512
a7fa23caaa61817c8210db470cb34e5ba9e60c3e6a3ac58786f2b48d619d0c618d90349631280490602d684aa1b7130dde4834a3399c650b1da4d2ca91670770
-
SSDEEP
3072:4StQnGrRnDWYwA0bUumDZz+Guu4pHigKCu+j34F2bsri56FJCJ85xYlz:4StQGtDN0bMDZz+pu8bjoF4UCJ8X6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f91bf6abc3e3c1f1d7ccb851c04d3963_JaffaCakes118
Files
-
f91bf6abc3e3c1f1d7ccb851c04d3963_JaffaCakes118.exe windows:4 windows x86 arch:x86
74e0b4a64cc97a5c1529cd1a4361795b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
CreateFiber
GetSystemInfo
HeapAlloc
HeapSize
SetUnhandledExceptionFilter
TerminateProcess
HeapReAlloc
ResumeThread
HeapDestroy
UnhandledExceptionFilter
EnumResourceNamesA
VirtualAlloc
LoadLibraryA
GetCommandLineA
IsProcessorFeaturePresent
VirtualQuery
ExitProcess
RtlUnwind
GetProcAddress
SetThreadPriority
GetLocaleInfoA
InterlockedCompareExchange
GetACP
VirtualProtect
VirtualFree
WriteFile
user32
IsWindow
GetKeyState
CallWindowProcA
IsChild
BeginPaint
SetFocus
GetClientRect
PtInRect
UnregisterClassA
IntersectRect
EndPaint
RealGetWindowClassA
RegisterClassExA
GetParent
UnionRect
GetFocus
InvalidateRect
CreateWindowExA
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ