Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3535f952b096701b7cfb099a1d9c591d.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_3535f952b096701b7cfb099a1d9c591d
-
Size
174KB
-
MD5
3535f952b096701b7cfb099a1d9c591d
-
SHA1
53b927e6b8b8244f28129e83ff19615a94977b9a
-
SHA256
0d06768defb5ccffbd8433e4396857c89d4471bf45428f4e1db8aee26d6d2b84
-
SHA512
c9ba11722ad6ce15ec8b6a76973f79532c6c1a7ab2c81dc421d5e9ea351b2aa49aaa3cf492769970ae442a57dd1deb07433af4ab812ae36e33ba431a490df609
-
SSDEEP
3072:SN/TXFHuay6CyilCNm/YUUEa2ipPyW0lPN9LvMYJ5MSSHvD+Ymcq2pN9A7:4BLiPvJa2ipPyPlPN9dTMzCwNW7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3535f952b096701b7cfb099a1d9c591d
Files
-
JaffaCakes118_3535f952b096701b7cfb099a1d9c591d.exe windows:4 windows x86 arch:x86
f3f6940334d806c356406c66aa3d631c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
AddAtomA
VirtualQuery
GetStartupInfoA
InterlockedExchange
TlsGetValue
FreeEnvironmentStringsW
GetModuleFileNameA
QueryPerformanceCounter
TlsSetValue
GetSystemInfo
IsBadWritePtr
TlsAlloc
GetEnvironmentStringsW
HeapSize
SetEndOfFile
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCPInfo
EnumResourceNamesW
GetVersionExA
VirtualAlloc
WriteFile
SetLastError
lstrcatW
UnhandledExceptionFilter
TerminateProcess
GetACP
GetOEMCP
GetCurrentProcessId
TlsFree
FreeEnvironmentStringsA
VirtualFree
HeapCreate
GetCurrentProcess
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
SetUnhandledExceptionFilter
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
iphlpapi
GetIpAddrTable
user32
IsWindow
CreateWindowExW
SendMessageA
DestroyWindow
GetDlgItem
EnumChildWindows
GetWindowThreadProcessId
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
Sections
.text Size: 87KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ