Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_aea5937bcd95a149cc7cfa3e880015cc7f4f335a957f51852325ec149d56acc7.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_aea5937bcd95a149cc7cfa3e880015cc7f4f335a957f51852325ec149d56acc7.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_aea5937bcd95a149cc7cfa3e880015cc7f4f335a957f51852325ec149d56acc7
-
Size
4.3MB
-
MD5
a621a7f1c507ecb82e1fd18137b0dcd1
-
SHA1
ae6aad6df613c176f1b5b450325a3124947ec032
-
SHA256
aea5937bcd95a149cc7cfa3e880015cc7f4f335a957f51852325ec149d56acc7
-
SHA512
cefda74be568c03e61c1c4ddafed4ffb790623a5723405b93e2b35b042ad09ed393038fa8fa9a6a62e6ab9bba4f11eaa2cf90eb423c8bb82dccc1f4552edcc15
-
SSDEEP
98304:dFr2HBl7R9Jqygm+4o9W1iCulD6zlEAsnIBdEa3YAEAsK1D:dR2PRnqygmGaiLlehnBdEZ1iD
Malware Config
Signatures
Files
-
JaffaCakes118_aea5937bcd95a149cc7cfa3e880015cc7f4f335a957f51852325ec149d56acc7.exe windows:5 windows x86 arch:x86
af15f8c81f40203c694f921fcf93798f
Code Sign
17:42:5b:68:18:28:b7:9e:c8:bf:03:ec:b0:33:9b:1dCertificate
IssuerPOSTALCODE=10124Not Before10-09-2021 18:47Not After10-09-2022 18:47SubjectPOSTALCODE=1012453:e0:81:8f:f1:51:8c:84:e1:8f:22:a2:74:8c:9c:c5:b5:91:df:85:c0:d7:40:a3:b3:6c:fb:6b:53:c9:34:31Signer
Actual PE Digest53:e0:81:8f:f1:51:8c:84:e1:8f:22:a2:74:8c:9c:c5:b5:91:df:85:c0:d7:40:a3:b3:6c:fb:6b:53:c9:34:31Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\dof\bosirukip\gudazimerexali zadizipip28_puci.pdb
Imports
kernel32
InterlockedDecrement
GetCurrentProcess
GetSystemWindowsDirectoryW
GetUserDefaultLCID
GetSystemDefaultLCID
ReadConsoleW
GetEnvironmentStrings
GlobalAlloc
GetLocaleInfoW
LeaveCriticalSection
lstrcpynW
FindNextVolumeW
WriteConsoleW
GetModuleFileNameW
InterlockedIncrement
GetACP
GetConsoleOutputCP
VerifyVersionInfoW
GetProcAddress
EnterCriticalSection
PrepareTape
ResetEvent
GetAtomNameA
DebugSetProcessKillOnExit
SetConsoleTitleW
GetModuleHandleA
Module32Next
GetCurrentProcessId
AddConsoleAliasA
FindActCtxSectionStringW
GetSystemTime
GetProfileSectionW
FindActCtxSectionGuid
GetLocaleInfoA
GetCommandLineW
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
HeapAlloc
Sleep
HeapSize
ExitProcess
RtlUnwind
HeapFree
SetFilePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
RaiseException
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
gdi32
GetCharWidthFloatW
advapi32
BackupEventLogA
BackupEventLogW
Exports
Exports
@GetAnotherVice@12
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 29.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ