Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_617f7c9f9a51151727fc9a4a047eeed0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_617f7c9f9a51151727fc9a4a047eeed0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_617f7c9f9a51151727fc9a4a047eeed0
-
Size
126KB
-
MD5
617f7c9f9a51151727fc9a4a047eeed0
-
SHA1
1e1a536d46d564dae5cd1ec3481eb7d07d4d86ed
-
SHA256
cb0d37b361325a088347b19ab3d017c9665672c832a8b049bd374479c23b3c73
-
SHA512
598a8e546e2668c60d382aac61c74ee232a9fbfbac97e802908ebb1cad9eebb0b4e8e6fb29442df5c5d83140d4d022aa53c8626eaa628d5154f8a497ce7c65eb
-
SSDEEP
3072:P3eJbXtbcLJo4CnN4SHb1/EJjdJ0AOV9:feJbXKLqhN4S7iJpJ0AOV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_617f7c9f9a51151727fc9a4a047eeed0
Files
-
JaffaCakes118_617f7c9f9a51151727fc9a4a047eeed0.exe windows:5 windows x86 arch:x86
a59b3e1ded00174a3931ca41b88df008
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventA
LocalFlags
GlobalLock
TlsGetValue
FindClose
GetVersionExA
IsValidCodePage
GetLocaleInfoW
GetStringTypeA
GetExitCodeThread
GetPrivateProfileSectionA
GetCurrentThread
GetFileAttributesW
GetModuleHandleA
RemoveDirectoryW
HeapFree
GetCurrentProcess
SetLastError
GetFileAttributesW
VirtualProtectEx
CreateDirectoryW
user32
PostMessageW
DefDlgProcA
GetWindowTextW
SetCursorPos
SetFocus
PeekMessageW
DispatchMessageA
IsWindow
GetWindowLongW
SetCursor
wsprintfW
IsDialogMessageA
LoadCursorA
msdtcprx
DTC_XaOpen
DTC_XaCommit
DTC_XaStart
DTC_XaEnd
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE