Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388
-
Size
730.8MB
-
MD5
243a3a6bf7890ca39908a0b1435fc554
-
SHA1
7cc4b371195359aeac6edcfe659218ecd833d6c3
-
SHA256
0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388
-
SHA512
13cc7d7a432a5e074c13f8daa424974cb3fd447aeb9a1334780b4885188b6dbc6267dcf7e99e51dd132f307b73654535447b68212ec8d58556db807f8e9248c6
-
SSDEEP
196608:guDF5ssyfmKJu4fS8xqR5vlfbEpBerajBFuhKezpVR77esXabOm:zrsnrJBj0mpBera1FuhKWp+sKSm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388
Files
-
JaffaCakes118_0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388.exe windows:6 windows x86 arch:x86
69ced1ad11dc0af68759e861c3ff436a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetFontLanguageInfo
ole32
CoInitialize
Sections
.text Size: - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!PP Size: - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Dq^ Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.(VD Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ