Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_47915fb7f9b82b1f0f8e46b4e393378c097c3512e7174b4a7837e4dbe1e40263.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_47915fb7f9b82b1f0f8e46b4e393378c097c3512e7174b4a7837e4dbe1e40263.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_47915fb7f9b82b1f0f8e46b4e393378c097c3512e7174b4a7837e4dbe1e40263
-
Size
732.2MB
-
MD5
55d0a7f3164b159dac241420b280db39
-
SHA1
f151e7ca817b7c55bdef8ceee1320ebf401747a5
-
SHA256
47915fb7f9b82b1f0f8e46b4e393378c097c3512e7174b4a7837e4dbe1e40263
-
SHA512
df013f76073fff6bf93fe26d41a5b68d6ca25eb9f389ee54ec871a1caa0f52355e644dc8bab9c1c1a12ef8c9661fcb0d861a7fae394e91b1d1765edf8643cb3f
-
SSDEEP
393216:whFJpaH0xdG/vOA86H1UY0eejqm54IlSpKAZ:wt5qOAFH8emfWIDAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_47915fb7f9b82b1f0f8e46b4e393378c097c3512e7174b4a7837e4dbe1e40263
Files
-
JaffaCakes118_47915fb7f9b82b1f0f8e46b4e393378c097c3512e7174b4a7837e4dbe1e40263.exe windows:6 windows x86 arch:x86
e0224bb1f86777b26682b150d90a08db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsRectEmpty
CharUpperBuffW
gdi32
GetDeviceCaps
ole32
CoInitialize
Sections
.text Size: - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.T8L Size: - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ym. Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6A" Size: 11.8MB - Virtual size: 11.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 416KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ