Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_68e751041dd64146a8750ea01ff710e0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_68e751041dd64146a8750ea01ff710e0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_68e751041dd64146a8750ea01ff710e0
-
Size
109KB
-
MD5
68e751041dd64146a8750ea01ff710e0
-
SHA1
8c8453064d5aa2673928318f124d449f5d97eb09
-
SHA256
cb9ec3b0344dd0d5e85ec60377d66f6e5ab04153e949ced419f83c0b89cce054
-
SHA512
5c9e778c57397a295afa0d7e4ab9430ae71ba52a16556cbdd44199aff16d94aa3d95c7a9ea17aa4b9650e78824fc169ba8068459617f15eb9a95271c1af453f6
-
SSDEEP
3072:tcXZGxQUiyKjJEafpI2mVJBcZntEz77C10/OPHYaight:tSIiyQ3fpv0iZiz77vGPHY0h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_68e751041dd64146a8750ea01ff710e0
Files
-
JaffaCakes118_68e751041dd64146a8750ea01ff710e0.exe windows:4 windows x86 arch:x86
af284ec38006fc80c7006c15a9a7dda8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
GetStartupInfoA
DeleteFileA
AddAtomW
Sleep
WriteConsoleW
GetProcessHeap
GetPrivateProfileSectionW
GetFileAttributesA
GetDriveTypeW
lstrcpyA
VirtualQueryEx
WriteConsoleW
GetModuleHandleA
WriteConsoleW
CancelIo
HeapDestroy
CopyFileA
VirtualProtect
lstrlenW
SetEvent
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
uxtheme
IsThemeActive
GetThemeSysSize
GetThemeBool
GetWindowTheme
GetThemeColor
DrawThemeEdge
DrawThemeBackground
GetThemeTextMetrics
SetWindowTheme
GetThemeTextExtent
OpenThemeData
CloseThemeData
CloseThemeData
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ