Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_88645bc9da6ddd1789ad2af11e91a808a7e5f5b8c858687106766b3f64441d64.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_88645bc9da6ddd1789ad2af11e91a808a7e5f5b8c858687106766b3f64441d64.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_88645bc9da6ddd1789ad2af11e91a808a7e5f5b8c858687106766b3f64441d64
-
Size
726.7MB
-
MD5
c5c73e442e6e2581a7b82620ca35000b
-
SHA1
904f581635c55c5be9735a27b024dac8d1e7dfa4
-
SHA256
88645bc9da6ddd1789ad2af11e91a808a7e5f5b8c858687106766b3f64441d64
-
SHA512
15986b4d3f8f7284861445c2c10c7be97aa849404e941b2600c024a2ddb3ce4e4fddd7e0792b7b2635374d971e09c06c1b594204e7362745e50c4ed185ca7a73
-
SSDEEP
196608:ex1ywBXWOEW7/IuV7YTIE1eAF+8k0Kq14EgQbtGGI:ex1lVEWrp8T9j88kNq14EndI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_88645bc9da6ddd1789ad2af11e91a808a7e5f5b8c858687106766b3f64441d64
Files
-
JaffaCakes118_88645bc9da6ddd1789ad2af11e91a808a7e5f5b8c858687106766b3f64441d64.exe windows:6 windows x86 arch:x86
11ea24073ee65343ee563e3160c77fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetObjectW
ole32
CoDecodeProxy
Sections
.text Size: - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.#<G Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.|8I Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c^o Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ