Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6120245ef7572b4021492e23e2c18000.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6120245ef7572b4021492e23e2c18000.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6120245ef7572b4021492e23e2c18000
-
Size
117KB
-
MD5
6120245ef7572b4021492e23e2c18000
-
SHA1
bd5b74df8c47da3f6b7631374be8a0d67d096a12
-
SHA256
02e48eec2b659e428c7586dcdad68521a398e82d2a1110b99f5b2f2b12a11202
-
SHA512
b432a346e68c9b62392763d8c24568b3232850a68798164b5dc1fe60f9d5bb79aae6685ba45a31a6529659960e3e9635da45944fec5cb5b78f8726ca31b29c2f
-
SSDEEP
1536:uX8BEfVB9tu5O/8nwRY7zlxwBNZR8O+4gu2fx92oqiYFStGVjEhTqxL:uXVdBC5OEnwG7XIoOefH2oYfgTq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6120245ef7572b4021492e23e2c18000
Files
-
JaffaCakes118_6120245ef7572b4021492e23e2c18000.exe windows:4 windows x86 arch:x86
cf5e78acc97a743c183546bd39e2c7c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadStringPtrW
CreateMutexA
GetModuleHandleA
FindResourceA
GetStartupInfoW
GetFileTime
FormatMessageA
lstrcatA
ReadConsoleA
CloseHandle
ReadConsoleA
GetLastError
InitializeCriticalSection
ReadFile
SetFileAttributesA
GetFileSize
IsValidLocale
lstrcpyA
GetCurrentDirectoryW
HeapCreate
ReadConsoleA
msi
MsiCloseHandle
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCreateRecord
user32
SetCursorPos
IsZoomed
PeekMessageW
LoadCursorW
SetFocus
GetWindowTextA
PostMessageW
IsCharLowerA
GetWindowLongW
IsWindow
DispatchMessageA
wsprintfW
IsDialogMessageA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ