Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_22e8bc8ca58e3c8e758cee5c675d0ac8182b576edc6ab17db1db6dc58856bc79.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_22e8bc8ca58e3c8e758cee5c675d0ac8182b576edc6ab17db1db6dc58856bc79.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_22e8bc8ca58e3c8e758cee5c675d0ac8182b576edc6ab17db1db6dc58856bc79
-
Size
4.3MB
-
MD5
902521c3a17392aced589384e4d04cb8
-
SHA1
33378ba9b545b03cf4f8f1e0e167d063751b3be3
-
SHA256
22e8bc8ca58e3c8e758cee5c675d0ac8182b576edc6ab17db1db6dc58856bc79
-
SHA512
0fe0e8382e9f6fba54390411819eb7914bdb46ca6e542f750aa3d68ed294ad05245dd793544712eb170119b7554a081d4b1f5b1c18e0b01b27127966097eb56c
-
SSDEEP
98304:CO4DT6gmWWXfBeEVaXTXpnbD8joh8DvB95NPY52huciVJP1JP:94DnOdVaXTZDaohcE58iVhP
Malware Config
Signatures
Files
-
JaffaCakes118_22e8bc8ca58e3c8e758cee5c675d0ac8182b576edc6ab17db1db6dc58856bc79.exe windows:5 windows x86 arch:x86
2966ac92acef7bd43000e50be4b3a82c
Code Sign
25:a5:14:e7:dd:7f:ae:e2:8c:1d:69:2d:a6:ae:7a:b4Certificate
IssuerPOSTALCODE=10051Not Before29-09-2021 12:29Not After29-09-2022 12:29SubjectPOSTALCODE=100515d:69:5b:17:74:7b:e2:91:d5:99:1d:c7:7d:53:0e:ab:33:46:e6:37:49:37:ab:e0:99:c8:ce:95:be:73:58:ecSigner
Actual PE Digest5d:69:5b:17:74:7b:e2:91:d5:99:1d:c7:7d:53:0e:ab:33:46:e6:37:49:37:ab:e0:99:c8:ce:95:be:73:58:ecDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\sexicecufap_lidari yuxaweg9-mow\kanoguca.pdb
Imports
kernel32
GetLocaleInfoA
LoadResource
HeapAlloc
EndUpdateResourceW
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
GetUserDefaultLCID
WaitForSingleObject
AddConsoleAliasW
SetEvent
GetCommandLineA
GetEnvironmentStrings
GlobalAlloc
ReadFileScatter
LeaveCriticalSection
FindNextVolumeW
GetFileAttributesW
WriteConsoleW
CreateActCtxA
GetDevicePowerState
GetProcAddress
VerLanguageNameA
RemoveDirectoryA
FreeUserPhysicalPages
PrepareTape
GetProcessId
EnumResourceTypesW
GetModuleFileNameA
GetModuleHandleA
ReleaseMutex
LocalSize
FindFirstVolumeW
lstrcpyW
CreateFileA
GetStartupInfoA
DeleteCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetLastError
SetFilePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
user32
GetCursorPos
Exports
Exports
@SetViceVariants@12
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ