Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_996f62d466a1e26472ae09dd26493e92e85fbcc49f4e6b4de7a4152b560a6986.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_996f62d466a1e26472ae09dd26493e92e85fbcc49f4e6b4de7a4152b560a6986.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_996f62d466a1e26472ae09dd26493e92e85fbcc49f4e6b4de7a4152b560a6986
-
Size
4.3MB
-
MD5
3d46bcf3892a7b7c4194921413c9bca7
-
SHA1
cd7b2381bb16a0d323f598c766c65d885743e614
-
SHA256
996f62d466a1e26472ae09dd26493e92e85fbcc49f4e6b4de7a4152b560a6986
-
SHA512
68dce2f6cd8bb2f618b805a7429252e14b5974053fe39d22d319600e6950df34e0865456ff82ff63616784881f61b05a8f5e23ee12d44baf99a03c750157fea6
-
SSDEEP
98304:DvRzWd0ivqH1jsc/mvfQpdJPAowyPhXUf1xQw0k74hg2rb/sOK:DJ00oc1jx/mvfQpdJ4oJPmf1G3dhg2HC
Malware Config
Signatures
Files
-
JaffaCakes118_996f62d466a1e26472ae09dd26493e92e85fbcc49f4e6b4de7a4152b560a6986.exe windows:5 windows x86 arch:x86
2aa979ef3cea65356d0640f20de6e03d
Code Sign
de:ba:6c:d8:5d:93:48:2b:ab:62:ab:e4:40:a5:c5:16Certificate
IssuerPOSTALCODE=10305Not Before16-11-2021 02:28Not After16-11-2022 02:28SubjectPOSTALCODE=1030531:e8:61:f3:33:74:46:df:22:e3:d0:fe:34:0d:8e:be:30:f2:91:70:31:76:04:06:9c:3e:9b:ab:36:00:73:49Signer
Actual PE Digest31:e8:61:f3:33:74:46:df:22:e3:d0:fe:34:0d:8e:be:30:f2:91:70:31:76:04:06:9c:3e:9b:ab:36:00:73:49Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\nahaxogowigij diyuhojobixa-sudacok.pdb
Imports
kernel32
InterlockedIncrement
_lwrite
GetSystemWindowsDirectoryW
GetNamedPipeHandleStateA
GetComputerNameW
FreeEnvironmentStringsA
GetTickCount
CreateNamedPipeW
GetProcessHeap
ConvertFiberToThread
GetSystemTimeAsFileTime
GetPrivateProfileStringW
GetWindowsDirectoryA
GetSystemWow64DirectoryA
QueryActCtxW
CreateActCtxW
GetSystemTimes
GetDriveTypeA
TlsSetValue
GetConsoleMode
GetVersionExW
HeapCreate
HeapValidate
GetVolumePathNamesForVolumeNameW
IsDBCSLeadByte
GetModuleFileNameW
CompareStringW
GetStartupInfoW
VerifyVersionInfoW
FindFirstFileExA
GetHandleInformation
GetLastError
SetDllDirectoryW
GetProcAddress
GetLongPathNameA
SetFirmwareEnvironmentVariableW
CopyFileA
GetConsoleDisplayMode
FindClose
LoadLibraryA
LocalAlloc
IsWow64Process
WritePrivateProfileStringA
IsSystemResumeAutomatic
SetCurrentDirectoryW
SetFileApisToANSI
QueryDosDeviceW
GetModuleFileNameA
GetOEMCP
GetModuleHandleA
GetProcessShutdownParameters
CreateWaitableTimerW
FreeEnvironmentStringsW
WriteProfileStringW
RequestWakeupLatency
BuildCommDCBA
GetConsoleCursorInfo
ReadConsoleInputW
TlsAlloc
FileTimeToLocalFileTime
CloseHandle
CreateFileW
FlushFileBuffers
CommConfigDialogA
SetWaitableTimer
GetConsoleAliasesLengthW
SetLastError
lstrlenA
DeleteFileA
GetCommandLineA
HeapSetInformation
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
InterlockedDecrement
DecodePointer
GetModuleHandleW
ExitProcess
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
IsBadReadPtr
EncodePointer
TlsGetValue
TlsFree
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetCPInfo
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
RtlUnwind
RaiseException
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
SetFilePointer
GetConsoleCP
SetStdHandle
user32
GetCaretBlinkTime
GetComboBoxInfo
gdi32
GetBitmapBits
advapi32
SetKernelObjectSecurity
AbortSystemShutdownW
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 35.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ