Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_837939e206502f100c54c70263b98b8628d0c2285cc5a4756b82959ef23f509e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_837939e206502f100c54c70263b98b8628d0c2285cc5a4756b82959ef23f509e.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_837939e206502f100c54c70263b98b8628d0c2285cc5a4756b82959ef23f509e
-
Size
4.3MB
-
MD5
9e70074c35541e0d16472a2dbad5f938
-
SHA1
9fa1927b0377ac2e2d9ee0c0a8947f79e6e8ec2e
-
SHA256
837939e206502f100c54c70263b98b8628d0c2285cc5a4756b82959ef23f509e
-
SHA512
d853535c0f6195c0a1f06451d35aa598f736789d5e76cb7eaebeb8a660dd55bdead6236d9428b79ae3e46a3e44b71ddc175433e2beb30a83d91a5971815538df
-
SSDEEP
98304:dFr2HBl7R9Jqygm+4o9W1iCulD6zlEAsnIBdEa3YAEAsK1u:dR2PRnqygmGaiLlehnBdEZ1iu
Malware Config
Signatures
Files
-
JaffaCakes118_837939e206502f100c54c70263b98b8628d0c2285cc5a4756b82959ef23f509e.exe windows:5 windows x86 arch:x86
af15f8c81f40203c694f921fcf93798f
Code Sign
ba:74:19:dd:4d:23:7e:17:6f:de:17:9f:b0:cc:0b:90Certificate
IssuerPOSTALCODE=10051Not Before10-09-2021 18:47Not After10-09-2022 18:47SubjectPOSTALCODE=1005153:e0:81:8f:f1:51:8c:84:e1:8f:22:a2:74:8c:9c:c5:b5:91:df:85:c0:d7:40:a3:b3:6c:fb:6b:53:c9:34:31Signer
Actual PE Digest53:e0:81:8f:f1:51:8c:84:e1:8f:22:a2:74:8c:9c:c5:b5:91:df:85:c0:d7:40:a3:b3:6c:fb:6b:53:c9:34:31Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\dof\bosirukip\gudazimerexali zadizipip28_puci.pdb
Imports
kernel32
InterlockedDecrement
GetCurrentProcess
GetSystemWindowsDirectoryW
GetUserDefaultLCID
GetSystemDefaultLCID
ReadConsoleW
GetEnvironmentStrings
GlobalAlloc
GetLocaleInfoW
LeaveCriticalSection
lstrcpynW
FindNextVolumeW
WriteConsoleW
GetModuleFileNameW
InterlockedIncrement
GetACP
GetConsoleOutputCP
VerifyVersionInfoW
GetProcAddress
EnterCriticalSection
PrepareTape
ResetEvent
GetAtomNameA
DebugSetProcessKillOnExit
SetConsoleTitleW
GetModuleHandleA
Module32Next
GetCurrentProcessId
AddConsoleAliasA
FindActCtxSectionStringW
GetSystemTime
GetProfileSectionW
FindActCtxSectionGuid
GetLocaleInfoA
GetCommandLineW
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
HeapAlloc
Sleep
HeapSize
ExitProcess
RtlUnwind
HeapFree
SetFilePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
RaiseException
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
gdi32
GetCharWidthFloatW
advapi32
BackupEventLogA
BackupEventLogW
Exports
Exports
@GetAnotherVice@12
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 29.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ