Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d88bb4099e9b785e81cabd7e4642bf2126f83fa655161d8c2749f8a49596ac21.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d88bb4099e9b785e81cabd7e4642bf2126f83fa655161d8c2749f8a49596ac21.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d88bb4099e9b785e81cabd7e4642bf2126f83fa655161d8c2749f8a49596ac21
-
Size
4.3MB
-
MD5
a7119cab47eadb189a19490b17075332
-
SHA1
7bbfbc49400ac1829340fc318a465110ba923730
-
SHA256
d88bb4099e9b785e81cabd7e4642bf2126f83fa655161d8c2749f8a49596ac21
-
SHA512
e627a37a720a79afe70131dfcf96e3974f87112db3d5dba898ec4265ca1386f57b27dec601cd0b13be8ec5c2a1f7fe278d814ade842fe7561cb8d58737266373
-
SSDEEP
98304:JSVAHcXo8WnWnZ5ov/jJbYscGCrmGfymylRsOrZq2AE59gVG2:OAHyo8WnaKv/lHczBMfAE5eG2
Malware Config
Signatures
Files
-
JaffaCakes118_d88bb4099e9b785e81cabd7e4642bf2126f83fa655161d8c2749f8a49596ac21.exe windows:5 windows x86 arch:x86
2aa979ef3cea65356d0640f20de6e03d
Code Sign
52:8f:b6:35:7d:e0:8a:f1:38:12:a5:47:2c:7e:1c:51Certificate
IssuerPOSTALCODE=10301Not Before16-11-2021 03:33Not After16-11-2022 03:33SubjectPOSTALCODE=1030181:27:46:83:f3:de:bf:29:8a:e5:c6:59:5e:93:65:f9:2e:b7:03:dd:42:a8:e6:bd:77:40:5b:eb:5e:a0:6f:f9Signer
Actual PE Digest81:27:46:83:f3:de:bf:29:8a:e5:c6:59:5e:93:65:f9:2e:b7:03:dd:42:a8:e6:bd:77:40:5b:eb:5e:a0:6f:f9Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\wiw\fuvu52-veval\tozukuhaceyor\mogon_zusakofi\muwosi34\fa.pdb
Imports
kernel32
InterlockedIncrement
_lwrite
GetSystemWindowsDirectoryW
GetNamedPipeHandleStateA
GetComputerNameW
FreeEnvironmentStringsA
GetTickCount
CreateNamedPipeW
GetProcessHeap
ConvertFiberToThread
GetSystemTimeAsFileTime
GetPrivateProfileStringW
GetWindowsDirectoryA
GetSystemWow64DirectoryA
QueryActCtxW
CreateActCtxW
GetSystemTimes
GetDriveTypeA
TlsSetValue
GetConsoleMode
GetVersionExW
HeapCreate
HeapValidate
GetVolumePathNamesForVolumeNameW
IsDBCSLeadByte
GetModuleFileNameW
CompareStringW
GetStartupInfoW
VerifyVersionInfoW
FindFirstFileExA
GetHandleInformation
GetLastError
SetDllDirectoryW
GetProcAddress
GetLongPathNameA
SetFirmwareEnvironmentVariableW
CopyFileA
GetConsoleDisplayMode
FindClose
LoadLibraryA
LocalAlloc
IsWow64Process
WritePrivateProfileStringA
IsSystemResumeAutomatic
SetCurrentDirectoryW
SetFileApisToANSI
QueryDosDeviceW
GetModuleFileNameA
GetOEMCP
GetModuleHandleA
GetProcessShutdownParameters
CreateWaitableTimerW
FreeEnvironmentStringsW
WriteProfileStringW
RequestWakeupLatency
BuildCommDCBA
GetConsoleCursorInfo
ReadConsoleInputW
TlsAlloc
FileTimeToLocalFileTime
CloseHandle
CreateFileW
FlushFileBuffers
CommConfigDialogA
SetWaitableTimer
GetConsoleAliasesLengthW
SetLastError
lstrlenA
DeleteFileA
GetCommandLineA
HeapSetInformation
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
InterlockedDecrement
DecodePointer
GetModuleHandleW
ExitProcess
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
IsBadReadPtr
EncodePointer
TlsGetValue
TlsFree
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetCPInfo
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
RtlUnwind
RaiseException
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
SetFilePointer
GetConsoleCP
SetStdHandle
user32
GetCaretBlinkTime
GetComboBoxInfo
gdi32
GetBitmapBits
advapi32
SetKernelObjectSecurity
AbortSystemShutdownW
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 35.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ