Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_60eb638295720acae219e287602e5630.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_60eb638295720acae219e287602e5630
-
Size
108KB
-
MD5
60eb638295720acae219e287602e5630
-
SHA1
78bc204d57fea6d129d7ea3c6ef0944e1ac3dc90
-
SHA256
a3aacd4b23d76efedc3ef15c4ac65297f2da11a0cacdbb2276432568f80be2ba
-
SHA512
5425599aed90354b949bd4068ab3290a380925e42ea973b740b4fe6f7be8cafe62a8ab88ee820d89d0e421ebf5008cb2c7dbf77269cd4125036eca8adfbae507
-
SSDEEP
1536:vpIq8LQiEKdeT+XBBxk5SVzHCZ6mSnDxoy9GCq2iW7z:vpIpQiEglq24+nDxoqGCH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_60eb638295720acae219e287602e5630
Files
-
JaffaCakes118_60eb638295720acae219e287602e5630.exe windows:4 windows x86 arch:x86
b5dd183c77e40a471c95d8ed4f85656a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
WaitForSingleObject
CloseHandle
CreateThread
CreateMutexA
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
FlushFileBuffers
WriteFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LCMapStringW
LCMapStringA
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
ReleaseMutex
GetLastError
SetStdHandle
GetOEMCP
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CreateFileA
GetCPInfo
GetACP
ws2_32
accept
gethostbyaddr
ntohl
inet_addr
socket
bind
listen
select
__WSAFDIsSet
closesocket
recv
ntohs
htons
send
WSAStartup
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pu� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE