Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_34ccb809ab57d6606df991ce278b99bf.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_34ccb809ab57d6606df991ce278b99bf
-
Size
177KB
-
MD5
34ccb809ab57d6606df991ce278b99bf
-
SHA1
6b493627726192d069fa29ed3ebd8c55c9239073
-
SHA256
1310f06fb2af00b140391ac0085549ac36465194b3f50cd2aacf6d5a1c889f02
-
SHA512
7d0934e9a55af82e4532a927fadb55512c01cda8a3c032d49132fee0143415280089d48bf76170d30476a32484dd6e67b691cf230dbe5509d2e1bd98cd81c971
-
SSDEEP
3072:pHNcIPMhL3li1h0FQzZdrhoslmqCt7Hzh8Ovr9pYPaQqn24f7OMcg:ptdPMZChuQldh/BCxek92
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_34ccb809ab57d6606df991ce278b99bf
Files
-
JaffaCakes118_34ccb809ab57d6606df991ce278b99bf.exe windows:4 windows x86 arch:x86
8d2d98b89a6e052785fe233b2097442f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
user32
DestroyWindow
SendMessageA
EnumChildWindows
GetDlgItem
CreateWindowExW
IsWindow
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
kernel32
InterlockedExchange
HeapDestroy
AddAtomA
FreeEnvironmentStringsW
SetHandleCount
GetOEMCP
TerminateProcess
GetACP
TlsSetValue
TlsFree
GetModuleFileNameA
GetCPInfo
FreeEnvironmentStringsA
TlsGetValue
GetCurrentProcess
HeapSize
GetFileType
IsBadWritePtr
GetCurrentProcessId
EnumResourceNamesW
GetSystemInfo
SetEndOfFile
GetStartupInfoA
VirtualFree
GetVersionExA
lstrcatW
QueryPerformanceCounter
TlsAlloc
GetEnvironmentStringsW
UnhandledExceptionFilter
HeapCreate
WriteFile
SetLastError
GetSystemTimeAsFileTime
GetStdHandle
VirtualQuery
VirtualAlloc
GetLocaleInfoA
GetEnvironmentStrings
SetUnhandledExceptionFilter
Sections
.text Size: 88KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ