Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_016b771e7703a7c73af8b3649925c44305298882722ebcf74892ad5e73ea5fcf.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_016b771e7703a7c73af8b3649925c44305298882722ebcf74892ad5e73ea5fcf.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_016b771e7703a7c73af8b3649925c44305298882722ebcf74892ad5e73ea5fcf
-
Size
392KB
-
MD5
058f7b9b4a8bb3b2b9d1b95df28b3327
-
SHA1
987a880f3084e31cc0203955fde67a8d025169df
-
SHA256
016b771e7703a7c73af8b3649925c44305298882722ebcf74892ad5e73ea5fcf
-
SHA512
dc36fcec743e9329407f8ea9d2c876a6ab847bcb1562fb3469ca88ad3de21e9b8cb6543271d1d18e431642b2420da63638f2309196bedfa64c9b966f29469f35
-
SSDEEP
6144:CAJbwH122xhDf69M9T7/APRMN9JgX5B+Kkt0tFzQJ:CAJv23fsM17/yW9Jg/+oG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_016b771e7703a7c73af8b3649925c44305298882722ebcf74892ad5e73ea5fcf
Files
-
JaffaCakes118_016b771e7703a7c73af8b3649925c44305298882722ebcf74892ad5e73ea5fcf.exe windows:5 windows x86 arch:x86
056a8a1a9c4c42207c32f3dcdf651893
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
SetWaitableTimer
InterlockedDecrement
GetNumberOfConsoleMouseButtons
InitializeSListHead
CreateJobObjectW
CreateDirectoryW
UnlockFile
GetTimeFormatA
ConnectNamedPipe
GetTickCount
TzSpecificLocalTimeToSystemTime
GetSystemPowerStatus
SetSystemTimeAdjustment
HeapDestroy
GetFileAttributesA
GetAtomNameW
IsDBCSLeadByte
ReadFile
GetModuleFileNameW
GetTimeZoneInformation
GetACP
RaiseException
GetConsoleOutputCP
GetHandleInformation
GetCurrentDirectoryW
GetConsoleAliasExesLengthA
FindVolumeMountPointClose
EnumDateFormatsExA
LocalLock
EnterCriticalSection
SetFileAttributesA
PrepareTape
GetProcessVersion
LocalAlloc
AddVectoredExceptionHandler
SetConsoleOutputCP
VirtualLock
HeapLock
SetCommMask
GetTapeParameters
GetModuleHandleA
QueryMemoryResourceNotification
FreeEnvironmentStringsW
SetCalendarInfoA
FindAtomW
LCMapStringW
CompareStringW
CompareStringA
GetProcessHeap
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
SetEndOfFile
SetLocalTime
GetProcAddress
GetConsoleAliasesLengthW
GetLastError
HeapReAlloc
HeapAlloc
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
CreateFileA
HeapSize
GetLocaleInfoW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetDateFormatA
GetUserDefaultLCID
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetDesktopWindow
GetProcessDefaultLayout
GetClassLongA
GetUserObjectInformationA
advapi32
ImpersonateAnonymousToken
RegCreateKeyW
SetPrivateObjectSecurity
Sections
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ