Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_61b84d2718d2d219e0684b531b5a57d0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_61b84d2718d2d219e0684b531b5a57d0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_61b84d2718d2d219e0684b531b5a57d0
-
Size
114KB
-
MD5
61b84d2718d2d219e0684b531b5a57d0
-
SHA1
ccb999fecf3d59073f8028efe5a9371d106a74b8
-
SHA256
d026821f6c963b18d70fb361a10f40ee4e6033d4915918a771072cfcbc022d13
-
SHA512
c5f96f136e2a12be79affc814f058461a888ccb9785501039d620d61e98a7e1d1a104c24da680574b212848a909d5aebf9080fb3cd4afc58d3c0e6b792139f6c
-
SSDEEP
1536:5p96CZao8HxOeiAR1D2hBaZtZU+6SYx2bpLdL/ObI9Kn7XS4AemGGfaq/lRinXq:SCepe+raSY0zabl7XmGGfaE2TswJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_61b84d2718d2d219e0684b531b5a57d0
Files
-
JaffaCakes118_61b84d2718d2d219e0684b531b5a57d0.exe windows:5 windows x86 arch:x86
fe1aed803085b4c4b5d275605fe9dd3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
CopyFileA
AddAtomW
GetPrivateProfileSectionW
CancelIo
GetFileAttributesA
Sleep
LoadLibraryW
WriteConsoleW
GetCommandLineA
DeleteFileA
WriteConsoleW
lstrlenW
lstrcpyA
GetDriveTypeW
GetProcessHeap
GetStartupInfoA
HeapSize
HeapDestroy
WriteConsoleW
SetEvent
mmcndmgr
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllCanUnloadNow
dsprop
FindSheet
ErrMsg
MsgBox
MsgBox
FindSheet
ReportError
ReportError
CheckADsError
MsgBox
ErrMsg
ErrMsg
FindSheet
CheckADsError
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE