Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f
-
Size
4.0MB
-
MD5
78eec9b8c977f035f2cb90667e9f203c
-
SHA1
f3fa4b6b5aae55f4c52dd9ca6abcadc5b46b9b33
-
SHA256
cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f
-
SHA512
a2967acd38ba3023fc1c69e8990d139fac539c1fc36e4caaff5b2eae2b9119621cf3991ac6d6558cca131a78634424e6021c390a84095d4dfaec114959b05f2b
-
SSDEEP
98304:gp8JoKXC6WjoKqJaDVm2GI7sqJLxOXzyuwCpCGh8Za5cYFlD:BojvjTqJaxm2XVxOjSCRhr5cYF5
Malware Config
Signatures
Files
-
JaffaCakes118_cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f.exe windows:5 windows x86 arch:x86
561a451083dbdf0da239256fdd35f263
Code Sign
05:92:8d:5e:7a:fa:d0:7d:56:66:81:91:48:d1:eb:46Certificate
IssuerPOSTALCODE=10305Not Before29-08-2022 04:17Not After29-08-2023 04:17SubjectPOSTALCODE=1030524:39:bc:4c:e1:21:80:c8:2a:f4:e8:db:c8:69:52:91:1e:f1:c0:d7:ba:1f:86:34:84:f0:ba:c1:52:57:3e:d6Signer
Actual PE Digest24:39:bc:4c:e1:21:80:c8:2a:f4:e8:db:c8:69:52:91:1e:f1:c0:d7:ba:1f:86:34:84:f0:ba:c1:52:57:3e:d6Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\xoduwimebef tugusan_xodamoyixusene_xaxosope.pdb
Imports
kernel32
FoldStringW
SetWaitableTimer
WaitNamedPipeA
CommConfigDialogW
SetSystemTimeAdjustment
SearchPathA
EnumResourceTypesA
GetCPInfoExA
EnumResourceTypesW
GetModuleFileNameA
WriteConsoleOutputCharacterW
GetConsoleAliasesLengthA
FillConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
LoadLibraryW
AddRefActCtx
GetConsoleAliasW
FindFirstChangeNotificationA
WritePrivateProfileStringW
EnumResourceNamesA
lstrcpynA
AddAtomA
GetConsoleAliasesLengthW
FreeConsole
SetPriorityClass
_lclose
SetCommMask
GetConsoleTitleW
CreateDirectoryExA
DeleteFileA
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
RtlUnwind
RaiseException
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapAlloc
HeapReAlloc
advapi32
BackupEventLogW
CloseEventLog
DeregisterEventSource
GetNumberOfEventLogRecords
GetEventLogInformation
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3.9MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ