Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_54de0acf7616e8d7374b9f9e266c0580.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_54de0acf7616e8d7374b9f9e266c0580.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_54de0acf7616e8d7374b9f9e266c0580
-
Size
115KB
-
MD5
54de0acf7616e8d7374b9f9e266c0580
-
SHA1
9af25d3f9d1a86328eed705f1cd2f7290efe96a1
-
SHA256
11b9337d258d446c87983252537b3e6bb9ed7cb42401a5fd3931dc9cfb63e784
-
SHA512
e7c4b2d1fce623425bde3d3f473fa773ce9b74770fe8a530f3a8cf3efd56731fcd31567e85e01edb4fad1d471b830c6988eac0669e9b389532fc6c2d4259eed0
-
SSDEEP
3072:23kS+bkLyJqgy42kORbTf3vcDUfzU/k8:WFo2kOFw8zp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_54de0acf7616e8d7374b9f9e266c0580
Files
-
JaffaCakes118_54de0acf7616e8d7374b9f9e266c0580.exe windows:4 windows x86 arch:x86
715f850daf7229740d52ecba7aa90c72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryW
lstrcpyA
WriteConsoleW
WriteConsoleW
GetFileSize
IsBadStringPtrW
ReleaseMutex
IsValidLocale
GetStartupInfoA
GetLastError
GetModuleHandleA
GetFileTime
lstrcpyW
WriteConsoleW
ReadFile
HeapCreate
CloseHandle
FormatMessageA
FindResourceA
CreateMutexA
SetFileAttributesA
msi
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCloseHandle
user32
LoadCursorW
PeekMessageW
PostMessageW
SetCursorPos
SetFocus
GetWindowTextA
IsZoomed
IsCharLowerA
IsWindow
GetWindowLongW
DispatchMessageA
wsprintfW
IsDialogMessageA
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE