Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5afa6d48ff429d440fba13d7d03f8d8e4b6ce6323c66b4803154d28d7ff22fa3.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5afa6d48ff429d440fba13d7d03f8d8e4b6ce6323c66b4803154d28d7ff22fa3.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_5afa6d48ff429d440fba13d7d03f8d8e4b6ce6323c66b4803154d28d7ff22fa3
-
Size
392KB
-
MD5
78090ce9e00f2a21eb3b78544b815c9a
-
SHA1
3fadbcb642f955caa23eb2b1d2c3d60cbfbd1161
-
SHA256
5afa6d48ff429d440fba13d7d03f8d8e4b6ce6323c66b4803154d28d7ff22fa3
-
SHA512
4b572acb1a2981f0ea3816ffa4b17246f3d8d87bb21f70e0cb7fb19aea692d7976ee5e9a1ad46d3554e08527a6bbc6f9f58cf4f09276ea36374e021f9b0192d9
-
SSDEEP
6144:DtepDxKdvl+cSDvB2P8o/Xi5rHPsoYf8smjUSe1QrvEBGp4wYIGr:DteZxKP+TvM/crHnYUXj6QrvCGCwG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5afa6d48ff429d440fba13d7d03f8d8e4b6ce6323c66b4803154d28d7ff22fa3
Files
-
JaffaCakes118_5afa6d48ff429d440fba13d7d03f8d8e4b6ce6323c66b4803154d28d7ff22fa3.exe windows:5 windows x86 arch:x86
c6dd551f3faaabc1b84b7af1e0dd4536
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
InterlockedDecrement
GetNumberOfConsoleMouseButtons
InitializeSListHead
CreateJobObjectW
CreateDirectoryW
UnlockFile
GetTimeFormatA
ConnectNamedPipe
GetTickCount
TzSpecificLocalTimeToSystemTime
GetSystemPowerStatus
SetSystemTimeAdjustment
HeapDestroy
GetFileAttributesA
GetAtomNameW
IsDBCSLeadByte
ReadFile
GetModuleFileNameW
GetTimeZoneInformation
GetACP
RaiseException
GetConsoleOutputCP
GetHandleInformation
GetCurrentDirectoryW
GetProcAddress
FreeLibrary
EnumDateFormatsExA
LocalLock
EnterCriticalSection
PrepareTape
GetProcessVersion
LocalAlloc
SetCalendarInfoW
AddVectoredExceptionHandler
SetConsoleOutputCP
VirtualLock
HeapLock
SetCommMask
GetTapeParameters
GetModuleHandleA
QueryMemoryResourceNotification
FreeEnvironmentStringsW
FindAtomW
SetFileAttributesW
LCMapStringW
CompareStringW
CompareStringA
GetProcessHeap
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetConsoleAliasExesLengthA
SetEndOfFile
SetLocalTime
FindVolumeMountPointClose
GetConsoleAliasesLengthW
GetLastError
HeapReAlloc
HeapAlloc
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
CreateFileA
HeapSize
GetLocaleInfoW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetDateFormatA
GetUserDefaultLCID
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetDesktopWindow
GetProcessDefaultLayout
GetClassLongA
GetUserObjectInformationA
advapi32
ImpersonateAnonymousToken
EqualSid
RegCreateKeyW
SetPrivateObjectSecurity
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ