Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_68c62a0deee0c92e6924d02fbc8f2870.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_68c62a0deee0c92e6924d02fbc8f2870
-
Size
194KB
-
MD5
68c62a0deee0c92e6924d02fbc8f2870
-
SHA1
d744ddb293f70d438d9d7f3ba17e2e161d5ff376
-
SHA256
04ee9f165c2cb81d98543afaad6f7b640f106a564eb88c8218588e0cb8135d65
-
SHA512
3f1da4a9d46899a4ec874331a7144f6efef9743859be8a937f54c220c94062c2b3faebbf0d93f8b84debd0a48eed2641e00e879c026c4d866c69b6f95b463383
-
SSDEEP
3072:StxaKF9F9dsnwsOduPCWf6mo1t0KkckqFOqXBCIShmi1K/0G8rpUnmOj7GCH:tC9+n9ufigpkqhBCIShmi13umj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_68c62a0deee0c92e6924d02fbc8f2870
Files
-
JaffaCakes118_68c62a0deee0c92e6924d02fbc8f2870.exe windows:5 windows x86 arch:x86
daeeb10237426db3a99f169f7c92e21a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetFileAttributesW
GetEnvironmentVariableW
WriteFile
SetFilePointer
SetEndOfFile
DeleteFileW
ReadFile
GetFileSizeEx
LocalFree
GetCommandLineW
WaitForSingleObject
GetTimeFormatW
GetLocalTime
OutputDebugStringW
CreateDirectoryW
MapViewOfFile
CreateMutexW
HeapReAlloc
GetSystemDirectoryW
GetCurrentProcess
GetVersionExW
CloseHandle
UnmapViewOfFile
CreateFileMappingW
MapViewOfFileEx
CreateFileW
GetLastError
Sleep
GetModuleHandleW
ReleaseMutex
GetProcAddress
WriteConsoleW
SetStdHandle
HeapSize
LoadLibraryW
HeapFree
RtlUnwind
DecodePointer
EncodePointer
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapAlloc
HeapCreate
GetStdHandle
RaiseException
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
MultiByteToWideChar
GetStringTypeW
GetProcessHeap
user32
wsprintfW
advapi32
RegSetValueExW
AllocateAndInitializeSid
GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
FreeSid
RegQueryInfoKeyW
RegEnumValueW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
shell32
SHGetFolderPathW
shlwapi
PathAppendW
PathIsNetworkPathW
PathStripPathW
PathStripToRootW
PathRemoveFileSpecW
PathIsRelativeW
PathSkipRootW
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
g�Q�u Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE