Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_54d9013c1b27f9194a71635eb0d042b8.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_54d9013c1b27f9194a71635eb0d042b8.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_54d9013c1b27f9194a71635eb0d042b8
-
Size
157KB
-
MD5
54d9013c1b27f9194a71635eb0d042b8
-
SHA1
55e9f043081fc339450d447a473f065eb4a7a5a1
-
SHA256
df38ecc2eeb18c65583b91423b02468dc7ac658372ab54ff4defcc84cf0717c9
-
SHA512
eb7481df94fb5c15ca5aec743ef9a13b385ef88f6fe014ca28997a8d161cbbef62b658ea91b79cadfe9c958cc3b0725931a925b6d25f9746ae1f98434fdfe9a5
-
SSDEEP
3072:EtjkPdqCSIIqPKdyWKcVUyY8GcmYiokJfiRsve09K/X8p2:yjkghsO1VWyYRcI0sMMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_54d9013c1b27f9194a71635eb0d042b8
Files
-
JaffaCakes118_54d9013c1b27f9194a71635eb0d042b8.exe windows:4 windows x86 arch:x86
c33a0ebd0fadc97049645a8e701c3e5e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
LockResource
InitializeCriticalSection
FillConsoleOutputCharacterA
WideCharToMultiByte
MultiByteToWideChar
GetProcessWorkingSetSize
GlobalFree
CreateFileMappingW
GetLastError
FindClose
OutputDebugStringW
lstrlenW
EnumResourceNamesA
lstrcpyW
lstrcpyA
GlobalAlloc
lstrcmpiW
FreeEnvironmentStringsW
GetACP
GetTickCount
GetCPInfo
GetModuleHandleW
user32
CharNextW
SetTimer
GetDC
CharUpperW
KillTimer
SendMessageA
TranslateMessage
PostThreadMessageW
wsprintfW
GetMessageW
DispatchMessageW
UnregisterClassA
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
shlwapi
PathCombineW
PathFileExistsW
ole32
CoRevokeClassObject
CoInitialize
CoRegisterClassObject
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
StringFromCLSID
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ