Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_618a5f910f6dfd87f6004b1f6bfabfe7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_618a5f910f6dfd87f6004b1f6bfabfe7.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_618a5f910f6dfd87f6004b1f6bfabfe7
-
Size
120KB
-
MD5
618a5f910f6dfd87f6004b1f6bfabfe7
-
SHA1
fc3ee1b9de9598ebc1435d1bf5212980cf9a7e6a
-
SHA256
1f3b55013d5f0dde7271d9d2b47cd80feb1b24914906de7ca9d72b5721203337
-
SHA512
c795ff7c20b51d171f76a43489ed964284c8f009001f568ef405f10d8117c6079e6b061afca19ab1221a3e9588f3e2e52e5906c4643fece3e5d42cd52fd53a3b
-
SSDEEP
3072:+YTWmises+EvjvFcLPMLrASGDEmrY23VfS1lAweekmxd:+xhJjCcLPMLrAD/lfS1Teek8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_618a5f910f6dfd87f6004b1f6bfabfe7
Files
-
JaffaCakes118_618a5f910f6dfd87f6004b1f6bfabfe7.exe windows:5 windows x86 arch:x86
e4f1b55eec30d20585551265ee702cfd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
ResetEvent
GetFileAttributesA
GetPriorityClass
CreateDirectoryA
ReadConsoleW
ReleaseMutex
SetLocalTime
GetCommandLineA
WriteFile
GetLocaleInfoA
GetStdHandle
VirtualProtect
GetProcessHeap
GetDriveTypeA
IsBadWritePtr
RemoveDirectoryA
DeleteFileA
GetModuleHandleA
HeapSize
CreatePipe
user32
PeekMessageA
DispatchMessageA
LoadCursorA
GetCapture
GetWindowLongW
GetCaretPos
wsprintfA
PostMessageA
SetCursor
DrawIcon
DestroyMenu
GetWindowTextW
SetFocus
els
DllGetClassObject
DllRegisterServer
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ